Privacy Policy
- Stapl runs entirely on your Mac. Your documents never leave your computer.
- Working on your documents makes no network connection: no analytics, no tracking, no accounts. Stapl makes two kinds of connection and neither one carries your documents: an automatic weekly check for a new version (section 3), which you can turn off, and (only if you enter a business license key) a check that the license is still valid (section 4).
- Personal use never makes that second call. If you never enter a license key, the update check is the only request Stapl makes.
1. Who We Are
Stapl is made by twoplus11 LLC, a Missouri limited liability company (twoplus11.com). When this policy says "we," "us," or "our," it means twoplus11 LLC.
Questions about this policy? Email us at jeremy@twoplus11.com.
2. Data We Do Not Collect
Stapl is built to be completely private:
- Your documents are yours. Every operation runs locally on your Mac. Nothing you open, edit, or save is ever uploaded to us or anyone else.
- No network connection to do its job. Merging, compressing, OCR and every other tool run entirely on your Mac; Stapl never uploads a document. The only requests it makes are the two described in sections 3 and 4.
- No analytics or telemetry. The app does not report usage or track what you do. It does not know which tools you open or what you do with them.
- No sign-up and no account. There is nothing to register for, and nothing to log in to. Personal use is free and never contacts us at all beyond the update check.
3. Update Checks
Stapl checks whether a newer version exists: quietly, about once a week, and whenever you open Check for Updates. The automatic check is on by default. To turn it off, open Settings (⌘,) and switch off Automatically check for updates.
The check goes to our own service at api.twoplus11.com, not to a static file on a web host. Updates are delivered by Sparkle, the standard macOS updater, which fetches the update feed at https://api.twoplus11.com/api/v1/appcast/stapl. When Sparkle is not present (for example a build run from source), the app instead asks https://api.twoplus11.com/api/v1/updates/stapl and passes the version you are running.
What that request contains: the app it is asking about, the version you are running, and (like any web request) your IP address and user agent. It says nothing about your documents, your files, or what you do in the app, and no document ever leaves your Mac.
What we do with it: because it reaches our own API, we receive it. We keep standard request logs (IP address, user agent, the app and version asked for, and the time) for security and operational purposes, and we count these requests in aggregate to see how many people are running each version. We do not link them to a person, and we do not sell or share them. Logs are retained for up to 90 days and then deleted.
If you install an update, Sparkle downloads the new build from us and verifies its EdDSA signature against the public key built into the app before installing it. A download that does not verify is refused.
4. Business License Activation
Personal use is free and involves no license check of any kind. This section applies only if you buy an honor-system business license and enter the key in Business license inside the app.
Once a key is stored, Stapl validates it against our licensing service at https://api.twoplus11.com/api/v1/license/validate. That happens when you activate the key and again each time you open the License dialog. Removing a license sends one more request, to https://api.twoplus11.com/api/v1/license/activation, which releases this computer's seat.
What that request contains: the product code (stapl), your license key, the app version, a device name (the Mac's Sharing name by default, you can change it before you activate), and a machine identifier. The machine identifier is a SHA-256 hash of your Mac's hardware UUID, truncated to 32 characters; it is stable for that computer, and it is what lets a license be tied to a seat and moved between machines. It is not tied to your name, and it tells us nothing about your documents.
What we do with it: we store the activation (key, machine identifier, device name, app version and timestamps) so we can tell you how many of your seats are in use and so you can move a seat between machines. We keep it for as long as the license is active, and we delete it when you remove the license or ask us to. We do not sell or share it.
If our service is unreachable, Stapl keeps working exactly as before: it never locks you out over a failed check.
5. If You Contact Us
If you email us (for support or to purchase an honor-system business license) we receive your email address and whatever you choose to put in your message. We use that information only to reply to you and, for a business license, to keep a record of your purchase. We do not sell or share it.
6. Downloading the App
Stapl is downloaded from our website, which is hosted by a third-party web host. Like any website, the host may keep standard server access logs (such as IP address) for security and operational purposes. This happens at the web-server level when you visit the download page, the Stapl application itself does not transmit anything.
7. Children's Privacy
Stapl is not directed at children under 13, and it does not knowingly collect personal information from anyone, including children.
8. Your Rights
If you are in the European Union, United Kingdom, or California, you may have the right to access, correct, or delete personal data we hold about you. The only data we hold is what you send us by email, our request logs (section 3), and (if you bought a business license) your activation record (section 4). You can exercise these rights by contacting jeremy@twoplus11.com. We will respond within 30 days.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Effective date" at the top of this page when we do. We encourage you to review this page periodically.
10. Contact
Questions or concerns about this Privacy Policy? Contact us at:
twoplus11 LLC
jeremy@twoplus11.com