Privacy Policy

Last updated: September 1, 2026

Tray Overflow is built to be private by default. The short version: the app collects no personal data, has no analytics, and requires no account — and this website sets no cookies and runs no trackers.

What the app does on your Mac

Tray Overflow uses the macOS Accessibility permission to find menu bar items and open their menus, and — only if you grant it — the Screen Recording permission to capture each menu bar item's icon so the picker can display it. Captured icons are stored in a local cache on your Mac. The app does not read window contents, documents, text, or keystrokes. Your settings, trial state, and license record are stored locally (in preferences and the macOS Keychain) and never leave your Mac, except as described below.

The only network calls the app makes

• License activation and validation. When you activate or use a license, Tray Overflow contacts Dodo Payments' licensing API and sends your license key and your Mac's device name (so you can recognize which of your Macs a license is active on). This is the only information transmitted.
• Update checks. Tray Overflow periodically checks for new versions using the Sparkle updater against our public release feed hosted on GitHub. This is an ordinary web request to GitHub; we operate no server of our own and receive nothing from it.

That's the complete list. There is no telemetry, no crash reporting service, and no third-party SDK that collects data. Menu bar icons captured for the picker never leave your Mac.

Purchases — handled by Dodo Payments

Purchases are processed by Dodo Payments as the merchant of record. When you buy Tray Overflow, Dodo Payments collects and processes the information needed to complete the sale (such as your email address, payment details, and billing country for tax purposes), issues your license key by email, and handles taxes and refund processing. We do not receive or store your payment details. See the Dodo Payments privacy policy for how they handle your data.

This website

This site is a set of static pages. It sets no cookies, embeds no analytics, and collects no information about you. It is served by Vercel, whose infrastructure may process standard technical request data (such as IP addresses) to deliver the site.

Data deletion

See our data deletion page for how to request deletion of your license record.

Changes

If this policy changes, the updated version will be posted at this address with a new date above.

Contact

Questions about privacy: support@mattmade.ai