Privacy Policy

Last updated: September 14, 2026

Tray Overflow is built to be private by default. The short version: the app collects no personal data, has no analytics, and requires no account — and this website runs no analytics or advertising trackers.

What the app does on your Mac

Tray Overflow uses the macOS Accessibility permission to find menu bar items and open their menus, and — only if you grant it — the Screen Recording permission to capture each menu bar item's icon so the picker can display it. Captured icons are stored in a local cache on your Mac. The app does not read window contents, documents, text, or keystrokes. Your settings, trial state, and license record are stored locally (in preferences and the macOS Keychain) and never leave your Mac, except as described below.

The only network calls the app makes

• License activation and validation. When you activate or use a license, Tray Overflow contacts Dodo Payments' licensing API and sends your license key and your Mac's device name (so you can recognize which of your Macs a license is active on). The app also sends the activated product identifier to our website to confirm that the key belongs to Tray Overflow.
• Update checks. Tray Overflow periodically checks for new versions using the Sparkle updater against our public release feed hosted by Vercel. These requests include ordinary connection information such as an IP address.

That's the complete list. There is no telemetry, no crash reporting service, and no third-party SDK that collects data. Menu bar icons captured for the picker never leave your Mac.

Purchases — handled by Dodo Payments

Purchases are processed by Dodo Payments as the merchant of record. When you buy Tray Overflow, Dodo Payments collects and processes the information needed to complete the sale (such as your email address, payment details, and billing country for tax purposes), issues your licence key, and handles taxes and refund processing. We do not receive or store your payment details. See the Dodo Payments privacy policy for how they handle your data.

This website

This site uses an essential, random purchase cookie that lasts up to 30 days and browser session storage to reconnect a checkout with its confirmation page. It embeds no analytics. We store checkout and payment references, product and customer identifiers, payment and licence status, and your purchase consent (the accepted text and version, its fingerprint, server time, IP address, and browser user agent). These records let us recover paid purchases, prevent duplicate fulfilment, and apply refunds. We do not store card details or licence keys in this ledger. The site is served by Vercel, which processes ordinary technical request data to deliver it.

Data deletion

See our data deletion page for how to request deletion of your license record.

Changes

If this policy changes, the updated version will be posted at this address with a new date above.

Contact

Questions about privacy: support@mattmade.ai