Privacy

Last updated: June 2026

Nottawa is a desktop application that runs on your Mac. The application itself does not collect personal data or contact our servers as part of normal operation. This page covers the limited data nottawa.app (the website and shared-content service) does collect.

What we collect

Website analytics

We use Google Analytics 4 to understand aggregate traffic to nottawa.app (pages visited, referring source, country, browser). This is set via the gtag.js script on our pages. We do not sell this data, and we do not combine it with any other identifier. You can opt out by using a browser extension that blocks Google Analytics or by enabling "Do Not Track" / Global Privacy Control in your browser.

Shared strands

If you choose to publish a strand from inside Nottawa (right-click a node → "Share Strand..."), the strand JSON and the preview image you select are uploaded to nottawa.app and made publicly available at a URL. Your IP address is recorded server-side for rate-limiting and abuse prevention. We do not collect your name, email, or any other personal identifier as part of sharing.

Voting on community strands

When you upvote or downvote a community strand at nottawa.app/strands, a random identifier is generated and stored in your browser's local storage to prevent duplicate voting. Your IP address is recorded server-side for rate-limiting.

Feedback

If you submit feedback through the app, the text you wrote and optionally a screenshot are sent to our server. You may include an email address — we only use it to reply to you if needed. We do not subscribe you to anything.

Downloads

We log basic information about downloads (IP, user-agent, timestamp) to monitor for abuse and understand version adoption.

What we don't collect

  • We do not collect anything about what you build with Nottawa unless you explicitly share a strand.
  • We do not collect audio, video, or screen content from your machine.
  • We do not sell or share data with third parties for marketing.

Retention

Analytics data is retained per Google's default (14 months). Server access logs are retained for up to 90 days. Shared strands are retained until you ask us to delete them ([email protected]) or until they are removed for policy violations.

Your rights

You can request deletion of any shared strand, vote record, or feedback by emailing [email protected] from a verifiable channel.

Contact

Privacy questions or requests: [email protected].