Almost nothing, and it stays here.

This site sets no cookies of its own. There is no login, no shopping cart, and nothing to consent to, which is why you are not being asked to dismiss a banner.

Analytics. I use Google Analytics 4 (property G-TP58FM45RV) to see which pages people read and roughly where they come from. It runs in a cookieless configuration: Google Consent Mode is set to deny analytics storage by default, so it does not write a cookie to your browser and cannot follow you between visits or across sites. What I see is aggregate — page, referrer, approximate region, browser, device type. What I do not see is you. Your IP address is truncated before Google stores it. If you would rather not appear even in those aggregates, Google's opt-out browser add-on blocks the whole thing, and any content blocker will do the same.

The contact form. It collects the name, email address, and message you type into it. That gets emailed to me and nowhere else. It is not stored in a database, not added to a mailing list, and not shared. Your email address is used to reply to you. To stop the form being used by spammers, the server keeps a short-lived count of recent submissions per IP address in a temporary file; it holds no message content and is discarded automatically.

Fonts. The site loads the IBM Plex typefaces from Google Fonts, which means your browser makes a request to fonts.googleapis.com and fonts.gstatic.com. Google receives your IP address as part of any such request. Those two hosts and Google Analytics are the only external services this site contacts.

Server logs. The site is hosted on DreamHost, and their web server keeps standard access logs — IP address, timestamp, the page requested. That is ordinary hosting infrastructure, it applies to every site on the internet, and I use it only to diagnose problems.

None of the apps below require an account, and none of them profile you or follow you across other apps and websites. Two do include a third-party SDK, and both are named where they apply: a crash reporter in The Register, and Google AdMob in Christmas Light Finder. Purchases are handled entirely by Apple and Google; I never see your payment details, and what I receive from the stores is a sales total, not a customer list.

Roadie is still in pre-release testing and is not covered here — it talks to its own server and ships its own privacy policy, which you will find inside the app and at roadie.pariahware.com.

Snake Tracker stores everything on your device. No account, no analytics, no network calls at all. Your records are yours, and they never leave the phone unless you back it up yourself.

The Register is a personal checkbook register for iOS, macOS and Android — multiple accounts, categories, transfers, splits, recurring bills, budgets, receipt photos and reports. It is local-first: your ledger lives on your device, and there is no Pariahware account and no Pariahware server behind it.

Keeping that ledger in step across your own devices is optional, and when you turn it on it goes through a service you already have rather than through me. On iOS and macOS the app can use iCloud: your data sits in this app’s private CloudKit database inside your own iCloud account — storage allocated to you, readable only by your devices and this app, and governed by Apple’s privacy policy. Dropbox is the other option, and the only one that reaches Android. The app writes solely inside its own App folder (Apps/The Checkbook Register), where it keeps a small change log, periodic database snapshots, and any receipt photos you attach. Nothing outside that folder is read or written, and Dropbox’s handling of it is governed by their privacy policy.

Either way, none of it is sent to Pariahware or to anyone else, I hold no copy and no key, and turning sync off — disconnecting Dropbox, or signing out of iCloud — leaves your data on your device.

The Register does report its own crashes, and it is the only app of mine that does. A register that loses a transaction has to be able to tell me how, so when the app crashes it sends a report to a third-party crash service: Firebase Crashlytics, which is Google's, on iOS and Android, and Sentry on macOS. A report holds the stack trace, the app and OS version, the device model, and a random identifier for that installation. It does not hold your name, your email address, or anything from your ledger. On macOS the reporter is explicitly configured not to attach the contents of memory around the crash — that is the one route by which a payee name or an amount could otherwise end up in a report, and it is switched off deliberately rather than left to a default.

Two things about that I would rather state than have you discover. Crashlytics also sends Google a small ping when the app launches, which is how it works out what share of users are not crashing; it carries no ledger data, but it is more than crashes alone. And crash reporting is on in the shipped builds, with no switch for it in the app today. If that matters to you, tell me — it is the kind of thing I will add.

DBMan is local-only: your databases stay on the device, and nothing is uploaded to me.

Biblicious has leaderboards. On Apple platforms those run through Game Center, so the scores and the nickname attached to them are governed by Apple's privacy policy rather than mine. Elsewhere, a server I run stores the score and the display name you chose — nothing else, and you can play without submitting a score at all.

Christmas Light Finder is the one app that is meaningfully networked. When you add a house to the map, its location and your description are sent to a server I run and shared publicly with everyone else using the app, which is the entire point of it. Submitted map data is cleared each season. Your device's location is used to show you nearby entries, and it is not stored anywhere unless you deliberately submit a house.

It is also the one app with advertising. Christmas Light Finder is free and shows a banner ad served by Google AdMob. AdMob is Google's product, not mine, and its SDK collects more than the app itself does — typically your device's advertising identifier, IP address, general device information, and ad interactions, which Google uses to select and measure ads. That collection is governed by Google's privacy policy and its advertising technologies notice rather than by this page. I receive none of it; what I see from AdMob is a revenue figure.

You have device-level control over this and it works regardless of what I do. On iOS, Settings → Privacy & Security → Tracking governs whether apps may request your advertising identifier at all. On Android, Settings → Privacy → Ads lets you delete the advertising ID or opt out of personalized ads. Google's own ad settings apply across both.

ChimeX and Porsche GTS Watch Face collect nothing and talk to no server.

I do not sell data, and I have never shared it with anyone for marketing. The complete list of third parties involved in anything described above is short:

• Google — Analytics and Fonts on this website, AdMob in Christmas Light Finder, Firebase Crashlytics for crash reports from The Register on iOS and Android, and Google Play as a store. Policy.
• Apple — the App Store, purchases, Game Center leaderboards, and iCloud sync in The Register if you turn it on. Policy.
• Dropbox — optional sync in The Register, and only if you connect it. Policy.
• Sentry — crash reports from The Register on macOS, processed on servers in the United States. Policy.
• DreamHost — hosts this site and the servers behind Biblicious and Christmas Light Finder.

That is the whole list. Nobody else receives anything.

If a law ever required me to hand something over, I would comply, but there is very little here to hand over.

You are entitled to ask what I hold about you, to have it corrected, or to have it deleted. Because the answer is usually "an email you sent me," this is not a bureaucratic process — email hello@pariahware.com and I will handle it myself, generally the same week.

The apps are not directed at children under 13, and I do not knowingly collect anything from them.

If this policy changes I will update this page and move the date below. There is no mailing list to notify.