Short version: theysap does not collect anything about you. There are no analytics, no cookies, no accounts, and no third-party scripts anywhere on this site or in the apps.
This website
This site is static HTML served as files. It sets no cookies and runs no analytics, tag managers, advertising pixels, or embedded third-party widgets. Fonts are served from this domain rather than from a font CDN, and no page calls out to any API. Loading any page on this site makes no request to any other company at all. The only JavaScript is a handful of lines that copy a command to your clipboard when you click the copy button.
Like any website, whoever hosts these files may keep short-lived server logs (IP address, requested URL, timestamp, user agent) for security and reliability. That data is not used to profile or track anyone, and is not sold or shared.
The apps
Notch Island has no analytics, no crash reporting, and no account. Nothing about what you listen to or watch leaves your Mac. The app makes network requests to exactly two kinds of destination: GitHub, to check for and download new releases; and whichever image URL the app you are playing from has published for its cover art, such as Apple Music’s own image CDN.
Notch Island asks for no Accessibility permission, no Screen Recording permission, and no Full Disk Access. It may ask for Automation access to the Music app, which is optional and used only to fetch artwork for tracks in your library and to read Music’s playback position accurately. It is a local-only permission; nothing obtained through it is transmitted anywhere.
Mech Keys has not been released. When it is, this policy will be updated before it ships, and it will be held to the same standard.
The extensions
GlassTube has no analytics, no telemetry, no advertising and no servers, and runs no remote code. It asks for one permission, storage, which keeps your preferences in Chrome’s synced storage and your recent searches in local storage on your computer. Neither leaves your browser except through Chrome’s own sync, if you have turned it on.
It runs only on www.youtube.com. To build its home rows it may load YouTube pages you could open yourself, such as your subscriptions, history or Watch Later, using your existing YouTube session in the same way the YouTube website does. That data is used only to draw the page, and is not stored or sent anywhere.
LiquidDo has no analytics, no telemetry, no advertising, no accounts and no servers, and makes no network requests at all. It asks for one permission, storage, which keeps your tasks, and any due dates and time zones you set on them, in local storage on your computer. They are not synced and never leave it. LiquidDo has no access to the websites you visit.
Children
These apps are not directed at children under 13, and no personal information is knowingly collected from anyone, of any age.
Your rights
Data-protection law gives you rights to access, correct, and delete personal data held about you. Since no personal data is collected, there is nothing held to hand over or erase. If you believe otherwise, write to mail@theysap.com and it will be looked into.
Changes
If this policy changes, the date at the top of this page changes with it. Material changes will be noted in the relevant app’s release notes as well.
Contact
Questions about privacy: mail@theysap.com.