Privacy Policy

Controller

The app collects nothing

Mellan has no accounts, no servers and no cloud. Your clipboard content and notifications travel directly between your Mac and your phone over an encrypted Bluetooth Low Energy link that the two devices establish when you pair them. None of that content reaches us, and none of it is stored anywhere but on your own devices. The Android app never reads your clipboard in the background — sending is always an explicit action you take.

The apps send us no telemetry, no crash reports and no usage analytics.

This website

Legal basis in brackets, per Art. 6(1) GDPR.

• Hosting (Vercel Inc., USA). Serving this site creates server logs containing your IP address, user agent, requested page and timestamp. Used to deliver the site and keep it secure; deleted on Vercel’s rolling schedule. (Art. 6(1)(f) — legitimate interest in a working, secure website.)
• Analytics (Plausible, self-hosted by us at insights.wsky.dev).We run the analytics server ourselves, so no third party receives your data. Cookieless and privacy-first: no cookies, no cross-site tracking, no personal profiles. IP addresses are not stored; they are only used transiently to generate a daily, salted, non-reversible visitor hash. (Art. 6(1)(f) — legitimate interest in basic visitor statistics.)
• Bot protection (Vercel BotID). Runs on form submissions to block automated abuse, processing request headers and signals about your browser. (Art. 6(1)(f) — legitimate interest in preventing spam.)
• Waitlist. If you enter your email address we store it, plus the time you signed up, with Upstash (servers in the EU) so we can email you when Mellan is available. We use it for nothing else and never sell or share it. We delete the waitlist once Mellan has launched and that announcement has gone out, or sooner if you ask us to. (Art. 6(1)(a) — your consent, withdrawable at any time.)
• Fonts. Typefaces are served from this website’s own domain. No request goes to Google Fonts or any other font CDN, so no data is transmitted to a third party when a page loads.

Payments

Our order process is conducted by Paddle.com, who act as Merchant of Record and as an independent controller for your payment data. We never see or store your card details. Paddle passes us only what we need to issue and support your licence — typically your email address, country and order reference. See Paddle’s privacy notice.

Your rights

Under the GDPR you can request access to your data, correction, deletion, restriction of processing, and data portability; you can object to processing based on legitimate interests; and you can withdraw consent at any time with future effect. Write to help@mellan.app — one person reads that inbox and will answer within 30 days. You also have the right to complain to a supervisory authority, for example the Bayerisches Landesamt für Datenschutzaufsicht.

Transfers outside the EU

Vercel and Paddle may process data in the USA. Those transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

Changes

We update this policy when the site or the product changes. The current version always lives at this address.