Privacy

The app

• What it contacts. Synoptiq talks to GitHub (its API, github.com and GitHub's file hosts for attachments and avatars) and to downloads.synoptiq.io for the update feed and downloads. It contacts other websites only for images you choose to load, for a repository's website icon if you turn that on (Settings → General → Privacy, or Repository Settings), and T3 Code if you connect it (below). There are no analytics, crash reporting or tracking, and update checks send no system profile.
• Your sign-in is stored only in the macOS Keychain. The app never has a client secret.
• On your Mac: the repositories you add, preferences, drafts, pins, saved views, snoozes, read state, what you sent to T3 Code and a cache of issues, pull requests and their summaries, in ~/Library/Application Support/io.synoptiq.mac (a few view and update settings are in macOS's preferences for the app). Signing out deletes the cache and Synoptiq's Spotlight entries, and can delete everything else for the account too (Settings → Account → Sign Out).
• Summaries are written by Apple Intelligence on your Mac. The conversation's text is never sent anywhere (not to us, and not to Apple's Private Cloud Compute), and you can turn them off in Settings → General → Apple Intelligence.
• Send to T3 Code (optional, Settings → Agents) talks only to the T3 Code address you connect, usually on this Mac. It sends the prompt your template makes (by default the item's link, number and title; a template can add its description, author and labels), a thread title if you type one and your choices, never your GitHub token. Its sign-in is kept in the Keychain; Disconnect removes it.
• Spotlight (on by default, Settings → General) indexes titles, numbers, repositories, labels, issue types, pull request branches and state, never descriptions or comments.
• Images hosted outside GitHub don't load until you click Load Images (or turn them on in Settings → General → Privacy), because loading one tells that website who read the issue.
• Diagnostics you export from Help → Export Diagnostics have versions, settings and recent log messages, with no names, repositories, issue text or tokens. Nothing is sent unless you attach it.

This website and support

More Clicks Ltd, trading as Synoptiq, is the controller of this data ("we"). Contact: support@synoptiq.io.

What we process and why

• Requests to synoptiq.io. Cloudflare, which delivers the site, records each request: an IP address, the time, the address asked for and the response. Our server also records the requests for this website. Update checks and downloads come from Cloudflare alone, at downloads.synoptiq.io, so our server never sees them. We use these records to run the site and the app's updates and protect them from attacks.
• Support emails. When you email us, we get your email address and what you send, including any diagnostics you attach. We use them to answer you.

For both, our lawful basis is legitimate interests: keeping the site and updates working and secure, and answering your questions. The site has no cookies, analytics or forms.

Who receives it

Our suppliers handle this data for us: a hosting provider, a server management service, a content delivery network (Cloudflare) and an email provider (Google).

The hosting provider and the server management service are in the European Economic Area, which UK law treats as adequate. Cloudflare and Google may process the data in the United States and other countries. Transfers to the United States rely on the UK–US data bridge, which UK law treats as adequate. Transfers to other countries rely on standard data protection clauses in their contracts with us. Email us for a copy.

How long we keep it

• Our server deletes its log lines within 53 days.
• Cloudflare keeps the records of requests it shows us in its analytics and security logs for 31 days. It keeps request data otherwise only while it needs it to provide its service to us, and not after we stop using Cloudflare.
• Support emails are deleted 2 years after the date they were sent.

Your rights

You can ask for a copy of your data, and ask us to correct it, delete it or restrict how we use it. You can also object to us using it. Email support@synoptiq.io.

If you're unhappy with how we handle your data, you can complain to us at the same address. You can also complain to the Information Commission (the ICO).

You don't have to give us any personal data. Visiting the site sends your IP address, which any website needs to reply, and you choose whether to email us. We make no automated decisions about you.