Privacy Policy

1. Who We Are

Grabbr is made by twoplus11 LLC, a Missouri limited liability company (twoplus11.com). When this policy says "we," "us," or "our," it means twoplus11 LLC.

Questions about this policy? Contact us.

2. Data We Do Not Collect

We want to be clear about what we don't do:

• Your downloads are yours. Grabbr downloads files directly to your Mac. We have no record of what you download, and downloaded files are never transmitted to our servers.
• Browser cookies stay on your device. Cookie-based authentication is off until you switch it on in Settings. When you do, Grabbr reads cookies from the local browser profile you name and passes them to the download engine on your own Mac. These cookies are never uploaded to our servers.
• No analytics or telemetry. The app does not track usage statistics or report what you download. Its only request to us is a check for a new version — just the version number — and you can turn it off in Settings.
• Personal users send us nothing but the update check. For free personal use there is no key and no validation — the only request Grabbr makes to us is the update check described in section 3, and you can turn it off.

3. Data We Do Collect

Update checks. Grabbr checks whether a newer version exists — automatically about once a week, and whenever you check manually. You can switch the automatic check off. The request goes to api.twoplus11.com and identifies the app and the version you are running; like any web request, it also carries your IP address. It says nothing about you, your Mac, or your files.

What we record when it checks. We log each check, so that we can tell roughly how many people still use the app: which app it was, the version reported, the date, the user-agent string, and a salted hash of your IP address — never the address itself, and the salt changes every day. Nothing in that record is tied to your name, an account, or a license. If you go on to install the update, that download is counted the same way.

Business license purchases

If you purchase a Business License, you provide your company name, email address, and number of seats. We receive your email address and company name to deliver your license key and manage your account. Payment card data is handled entirely by Stripe — we never see it.

License validation

When you activate a business license key, Grabbr sends the license key, an anonymous machine identifier, the app version, and the name you typed into Name this computer — so you can tell your seats apart in your own account. Leave that box empty and nothing is sent in its place. Grabbr verifies the license against our licensing server. Server requests are routed through Microsoft Azure, which may retain standard web server access logs (including IP addresses) for security and operational purposes.

What Grabbr installs on your Mac

So the browser extension can reach the app even when it is closed, Grabbr installs a small background helper the first time it runs. It is a login item (com.jeremy.grabbr.bridge) that listens on 127.0.0.1:8766 and does one thing: hand a link you sent from the extension to Grabbr, launching it if it is not already open. If Grabbr cannot be reached at all, the link is saved in ~/.grabbr/pending_urls.json on your own Mac — at most 50 of them, discarded after a day — so it is queued the next time Grabbr starts instead of being lost. Nothing in that file is sent anywhere. It makes no network requests of its own and sends nothing to us. Turn off Background helper for the browser extension in Settings and Grabbr unloads it, deletes its login item, and removes its files in ~/.grabbr. Its launchd output goes to ~/Library/Logs/Grabbr.

4. Third-Party Services

• SponsorBlock — when Smart Trim is enabled, Grabbr sends the YouTube video ID to the SponsorBlock API (sponsor.ajay.app) to retrieve sponsor segment timestamps. SponsorBlock is an independent project with its own privacy policy. This data transmission happens only for YouTube videos with Smart Trim on, and SponsorBlock will receive your IP address as part of that request.
• yt-dlp self-update — when you click "Update yt-dlp" in the app, Grabbr downloads the latest yt-dlp binary from GitHub. GitHub may log this request.
• The site you are downloading from — the download itself is a direct request from your Mac to that site, and it sees your IP address the same way your browser would. When you paste a YouTube link, Grabbr also loads that video's thumbnail from img.youtube.com to show you what you are about to download.
• A proxy, if you configure one — set a proxy address in Settings and your downloads are routed through that server instead of going out directly, so its operator can see them. Nothing else in Grabbr uses the proxy: the update check, license validation and the SponsorBlock lookup do not go through it. Grabbr never sets a proxy for you, and the field is empty until you fill it in.
• Stripe — payment processing for business licenses. See stripe.com/privacy.
• Microsoft Azure — our licensing API is hosted on Azure App Service.

We do not use advertising networks, social media pixels, or third-party analytics tools.

5. Data Retention

We retain your email address and company name for as long as you hold an active business license. You may request deletion at any time by contacting us — we will delete your information within 30 days, though this will deactivate your license.

6. Your Rights

If you are in the European Union, United Kingdom, or California, you may have the right to access, correct, or delete personal data we hold about you. To exercise any of these rights, contact us. We will respond within 30 days.

7. Children's Privacy

Grabbr is not directed at children under 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Effective date" at the top of this page when we do.

9. Contact

Questions or concerns about this Privacy Policy? Contact us at:

twoplus11 LLC
twoplus11.com/contact