Privacy policy
The Tabulay app collects nothing. This website sets no cookies of its own. If you leave your email for the launch, we use it once, then delete it.
This policy follows the General Data Protection Regulation (GDPR, EU 2016/679) and the French Data Protection Act of 6 January 1978.
Who is responsible
Expertise By Me (Alain Deléglise), 80 rue du Général de Gaulle, 59139 Wattignies, France. Contact: privacy@tabulay.app.
1. The Tabulay app
The Tabulay app collects nothing: no personal data, no usage data, no file contents. Its App Store privacy label reads “Data Not Collected”.
- Your files stay on your Mac. Tabulay opens only the files and folders you choose. It reads and writes them on your Mac and never sends their contents anywhere.
- No network access. The app has no permission to connect to the internet. It contains no analytics, advertising or tracking code, and it does not create an account.
- Purchases. In-app purchases are handled by Apple. Tabulay only learns whether a purchase or trial is active, never your name, email or payment details.
- Settings. Your preferences, recent files and saved queries are kept on your Mac, in the app’s own container (
~/Library/Containers/me.expertiseby.tabulay). Moving the app to the Trash leaves that folder in place; delete it to remove them. - Feedback. Help ▸ Send Feedback opens your own mail app with a message you can read and edit first. Nothing is sent unless you press Send there. Unless you untick the box, it includes technical details you can see first (app and macOS versions, type of Mac, whether you use the free version, the trial or Pro, and, if a file is open, its type, size, encoding and row and column counts). Never its contents, name or location. We use what you send only to answer you and improve Tabulay, and delete it when it’s no longer needed.
- Crash reports. If you choose to share analytics with Apple in macOS settings, Apple may send us anonymous crash reports. They contain no file contents.
2. This website (tabulay.app)
Cookies and trackers
This site sets no cookies of its own and uses no advertising or behavioral tracking tools. Fonts are served from this site, with no call to a third party.
Security cookie. Our host, Cloudflare, protects the site against bots and attacks. Only if it has to check a connection that looks suspicious (for example a browser that doesn’t identify itself, or traffic during an attack) does it show a short check and then set a cookie named cf_clearance, so that it doesn’t check you again on every page. The cookie works only on this site, lasts 30 minutes by default and is used for nothing else. It is strictly necessary to keep the site secure, so it needs no consent (article 82 of the French Data Protection Act, CNIL guidelines of 17 September 2020), and there is no consent banner.
Launch list
| What we keep | Your email address, the language of the page, the date, and where the visit came from (the referring site or the campaign tag utm_source). No IP address or other identifier is stored with your sign-up. Until you confirm, we also keep a fingerprint (SHA-256) of the link we emailed you, and when we sent it. |
|---|---|
| Why | To check the address is yours (one email with a link to confirm it), then to write to you once, on the day Tabulay is on the Mac App Store. The source tells us, in totals only, which launch channels work. |
| Legal basis | Your consent (GDPR art. 6.1.a), given by sending the form. You can withdraw it at any time. |
| How long | An address not confirmed within 7 days is deleted. A confirmed one is kept until the launch email is sent; the list is then deleted within 30 days. At most 12 months after you sign up if the launch hasn’t happened. |
| Who sees it | Expertise By Me only. The list is never sold, rented or shared. |
| Where | Cloudflare D1, a database located in Western Europe, run by Cloudflare, Inc.. The confirmation email is sent through Cloudflare Email Service. |
Technical logs
To serve and protect the site (for example against denial-of-service attacks), our host processes connection data such as IP addresses and browser types. Legal basis: legitimate interest (GDPR art. 6.1.f). We don’t use it to identify visitors.
If you email us
We receive what you choose to send and use it to answer you. We keep the conversation for up to 3 years after the last contact.
Transfers outside the EU
Cloudflare, Inc. is a US company. Even when data is stored in Europe, some technical processing may happen outside the European Union. It is covered by the EU-US Data Privacy Framework, which Cloudflare has joined, and by the European Commission’s standard contractual clauses. Cloudflare’s policy: cloudflare.com/privacypolicy.
3. Your rights
Under GDPR articles 15 to 22 you can access, correct and erase your data, restrict or object to its processing, ask for a copy, and withdraw your consent. Write to privacy@tabulay.app from the address concerned: we answer within a month.
You can also complain to the French data protection authority, the CNIL: cnil.fr/fr/plaintes, or to the authority where you live.
Security
The site is served over HTTPS only, with a strict content security policy. Access to the launch list is limited to the data controller.