Privacy Policy

Tagrid never sends the contents of your audio files anywhere. What it does send is counts: which Mac it is running on, which features were used, and how many times. This page explains that in two parts — the app and this website — covering what is sent, what is not, and how to stop it.

Effective 6 September 2026 · Last updated 9 September 2026 · Operated by robohei

Who we are

Tagrid is built and run by robohei, an individual developer based in Japan. robohei is the data controller for the information described on this page.

Feedback and bug reports go through the feedback form, the same destination as the Feedback button in the app's toolbar. The form is anonymous and asks for no address, so no reply is possible — but everything sent through it is read.

The Tagrid app

Usage measurement

Tagrid reports anonymous usage so that development can be aimed at what people actually use. It is used for three things only:

• Seeing which features are used, to decide what to fix and what to build next
• Seeing which macOS versions, Mac models and screen sizes are in use, to decide what to test against
• Seeing how often saving fails, so that bugs get noticed

It is never used for advertising, and it is never sold.

Only these two kinds of fixed, structured values are sent. No free-form text is ever sent.

What is never sent

The following are never sent, under any circumstances:

• File names, folder names, file paths, disk or volume names
• Tag contents (title, artist, album, comments, and so on)
• Artwork images
• The audio itself
• Your macOS account name or email address
• Error messages themselves (only the number identifying the type)

Where it goes, and for how long

Usage data goes to Mixpanel, an analytics service. Mixpanel is a US company and the data is stored in the United States. It is kept for 2 years and then deleted.

Mixpanel acts as a processor on robohei's behalf; under its terms it processes the data only to provide the service to us.

So that year-on-year comparisons remain possible, this data may be exported once a year and kept by robohei. An export contains only what the table above describes, and is kept without a fixed time limit.

Approximate location

Mixpanel derives an approximate location — country, region and city — from the IP address the request came from. Those three values are what gets recorded; the IP address itself is not kept. Nothing as precise as a street address or coordinates is available.

Can you be identified?

Not by us — but it is not fully anonymous either.

Tagrid generates one random number per installation and attaches it to what it sends. It is not derived from anything about your Mac, it is not shared with any other app or site, and no name or email address is attached to it.

That number does, however, link together the records that arrive from the same installation. So while we cannot tell who you are, the pattern of use of one particular machine can be followed. Under the GDPR, that random identifier — and the IP address your connection carries — count as personal data. Your choices sets out what you can do about that.

Turning it off

Settings > Privacy has a switch: "Send anonymous usage data". Turn it off and nothing more is sent.

While it is off nothing is recorded either — the app does not keep counts on your Mac for later — and whatever it had counted up to that point is thrown away.

Records that arrived before you switched it off remain for the retention period described above. Switching it off also discards the installation's random number and makes a new one, so if you ever switch it back on, what arrives afterwards is not connected to anything sent before.

Update checks (Sparkle)

Tagrid checks for new versions on its own. This is a separate mechanism with a separate destination from the measurement above.

• It is on by default and fetches the release notice file (appcast.xml) about once a day
• That file is hosted on GitHub Pages, a US service operated by Microsoft. It has nothing to do with Mixpanel
• What reaches GitHub is what any web request carries: your IP address, the date and time, and the app's name and version. No profile of your Mac's model or environment is sent — Sparkle offers that feature, and Tagrid does not use it
• robohei does not receive these access logs
• You can turn this off in Settings > Updates.

The feedback form

The Feedback button in the toolbar opens a Google Form. Sending it is entirely your choice. No sign-in is required and it does not ask for your name or email address.

robohei cannot tell who sent a report. Google, which hosts the form, may however process the IP address of the submission, and will associate it with your Google account if you are signed in to one in that browser. If that matters to you, send it while signed out or from a private window.

The app prepares a report for you to paste in; you see it before you paste it. File names, folder names, volume names and account names are automatically masked out of that report.

Responses are kept only as long as they are useful for fixing the problem, and then deleted.

Donations

Donations are handled by Stripe. The payment happens entirely on Stripe's own pages, and no card number or other payment detail reaches Tagrid or this website — Stripe handles all of it as the controller of that data.

When a donation arrives, what robohei can see in the Stripe dashboard is your email address, the amount, the date, and payment details such as the last four digits of the card. Never the card number itself. It is looked at for accounting and is not used for anything else.

This website

Analytics

This site uses Google Analytics 4 (GA4), loaded through Google Tag Manager, to see which pages get read.

What is collected is the ordinary range for web analytics: pages viewed, number of visits, referrer, browser and OS, screen size, and approximate region. IP addresses are used to derive that approximate region and are not stored by GA4.

User-level data is set to be deleted automatically after 14 months.

Cookies

GA4 uses cookies — small markers stored in your browser — to recognise a repeat visit. You can refuse them in your browser settings or with an extension, or install Google's opt-out add-on, and the measurement stops.

Where the site is hosted

This site is hosted on Cloudflare Pages (a US company). Every page request passes through Cloudflare, so your IP address appears in their access logs. robohei does not receive those logs.

Search Console

Google Search Console is used to check how the site appears in search results. It reports aggregate search terms and impression counts; no individuals are identifiable in it.

Legal basis

We rely on legitimate interests (Article 6(1)(f) GDPR) for both the app's usage measurement and this site's analytics: understanding how a free app and its site are actually used is necessary to maintain and improve them, and the data is limited to counts, environment values and ordinary web analytics that carry no content from your files and cannot identify you to us. You can stop the app's measurement at any time with the switch in Settings — see Your choices. For a donation, handling your email address and the payment record is necessary to carry out the donation you chose to make (Article 6(1)(b)).

The analytics cookies described above are set by Google Analytics in your browser. Where your local law requires your consent for cookies, you can refuse them through your browser settings or Google's opt-out add-on.

Recipients, transfers and sharing

Data reaches Mixpanel, Google, Cloudflare, GitHub and Stripe only to the extent each service needs it to work. It is not passed to, or sold to, anyone else. It is not used for advertising. We do not sell or share personal information, including as those terms are used in US state privacy laws.

All five are US-headquartered companies, so your data is transferred outside the EEA, the UK and Switzerland. Each of them offers the European Commission's Standard Contractual Clauses in their data processing terms, and those are what these transfers rely on, alongside each company's own supplementary measures. Their privacy policies, linked above, set out the details.

Traffic is encrypted (HTTPS) throughout. robohei is the only person with access to any of these service dashboards.

Your choices

• The app's usage measurement — turn off "Send anonymous usage data" in Settings > Privacy
• Update checks — turn off "Check for updates automatically" in Settings > Updates
• This site's cookies — refuse them in your browser settings, or install Google's opt-out add-on

Nothing that reaches us carries a name, an email address or an account, so a record cannot be connected to a person from our side.

If you are in the EEA or the UK, the GDPR gives you rights over your personal data — access, rectification, erasure, restriction, objection and portability — and the right to lodge a complaint with a supervisory authority: your national data protection authority in the EEA, or the ICO in the UK. In Japan, the equivalent body is the Personal Information Protection Commission.

Children

Tagrid is not directed at children under 16, and no age information is collected.

Changes to this policy

When this policy changes, the "last updated" date at the top changes with it. If the app ever measures more than what is described here, this page is updated first.