RaytoPrivacy policy
Short version: Rayto has no account, no analytics and no tracking. It works on your Mac and goes online only for the few things listed below. This website sets no cookies.
1. Who is responsible
Full name, street, postcode, city, Germany — see the Impressum. Email: [email protected].
2. This website
rayto.app uses no cookies, no analytics and no tracking pixels. It is delivered through Cloudflare, Inc. (USA), which processes your IP address and technical request data (time, page, browser) to deliver the site and protect it from attacks. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
3. The Rayto app
Most of Rayto never leaves your Mac:
- Accessibility access is used only on your Mac, to see your gestures and to press keys for you. Nothing it sees is stored or sent anywhere.
- Your menus and settings are stored on your Mac.
- Your licence key is checked on your Mac — no server is asked.
- The trial's start date is stored on your Mac (in Rayto's settings and your keychain) so that reinstalling does not restart the trial.
- The diagnostic log stays on your Mac. Rayto keeps about the last hour of what it did — which menu opened, which pill fired, pointer positions and window numbers — never window titles, page addresses, file names, typed text or the clipboard. It leaves your Mac only inside a problem report you send yourself. You can switch it off under Settings › More › “Keep a diagnostic log on this Mac”, which also deletes it.
Rayto goes online only in these cases:
- Update checks. Rayto asks rayto.app (Cloudflare) whether a new version exists; the update list and downloads are served from GitHub (GitHub, Inc., USA). This reveals your IP address and Rayto's version number to these services. Legal basis: Art. 6(1)(b) GDPR (providing the software you use) and (f).
- Icons for website pills. When you add a pill that opens a website, Rayto fetches that website's icon — first through Google's favicon service (Google LLC, USA), which receives the website's domain name and your IP address; if Google has none, from the website itself, which then receives your IP address. Legal basis: Art. 6(1)(f) GDPR.
- Shared presets. If you open the preset gallery, Rayto downloads the list of presets from GitHub, which receives your IP address.
- Page titles. Only when you click “Use page title” in a pill's editor, Rayto loads that web page once to read its title; the website receives your IP address. Legal basis: your request (Art. 6(1)(b) GDPR) and (f).
- Problem reports — only if you send one. “Report a Problem” opens an email draft in your mail app with what you write and a plain-text diagnostic file attached: Rayto's version, your macOS version, your Mac model and the recent log. You read everything before sending; nothing is sent unless you send that email. We keep a report only until the problem is solved. Legal basis: Art. 6(1)(f) GDPR (fixing the software you asked us about).
- Crash reports — only if you send one. After a crash, Rayto offers to open an email draft in your mail app with a report attached. Nothing is sent unless you send that email.
4. Buying Rayto
Rayto is sold by {{CHECKOUT PROVIDER}}, our reseller (merchant of record). It processes your payment and billing details as its own controller, under its own privacy policy. We receive your name, email address, country and order details to issue your licence key, send it to you and support you. We keep these records as long as tax and commercial law require (Art. 6(1)(b) and (c) GDPR).
5. Email
Email to [email protected] arrives in our mailbox at Apple's iCloud Mail (Apple Inc., USA). We use your message only to answer it and delete it when it is no longer needed.
6. Transfers outside the EU
Cloudflare, GitHub, Google, Apple and Notion are based in the USA. Transfers rely on the EU–U.S. Data Privacy Framework or the EU Standard Contractual Clauses.
7. Your rights
You can ask us for access to your data, its correction or deletion, a restriction of its processing, a copy to take elsewhere, and you can object to processing based on our legitimate interest (Art. 15–21 GDPR). Write to [email protected]. You can also complain to a data protection authority, in particular in the EU country where you live (Art. 77 GDPR).
Last updated: 17 October 2026