Privacy

This page explains which personal data is processed when you visit starnotch.app and when you use the Starnotch app, for what purpose, on which legal basis and through which services.

1. Controller

Email: julio@juliokoelle.com

No data protection officer has been appointed; there is no obligation to do so.

2. This website

The website is a set of static pages hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When you open a page, GitHub processes technically necessary data: your IP address, the time, the page requested, and details about your browser and device. GitHub may process this data in the USA.

Purpose: delivering the website and keeping it secure. Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in operating the website safely and reliably.

The website sets no cookies, uses no analytics or tracking, loads no external fonts and embeds no third-party content. It stores nothing in your browser.

3. Links to GitHub

"Download for Mac" and "Star on GitHub" link to github.com. Once you follow such a link, GitHub's own privacy statement applies.

4. The Starnotch app

The app runs entirely on your Mac. It has no account and no telemetry and sends no data to the developer or to any server.

• It reads Claude Code's and Codex's local session files (under ~/.claude and ~/.codex) read-only, to show your sessions in the island.
• Calendar access is asked for only when you first open the calendar module; events are read on your Mac and stay there.
• Music control talks to Spotify or Music on your Mac through macOS automation.
• The app never reads the Keychain or browser cookies.
• Permission prompts from Claude Code and Codex reach the app over a local Unix socket that only processes of your own user can use. Nothing is logged or sent anywhere.
• Connectors you add yourself decide what they talk to; they are outside the scope of this statement.

5. Email

If you write to the address above, your email address and message are processed to answer you. Legal basis: Art. 6(1)(f) GDPR, the legitimate interest being to answer inquiries. The email is deleted once it is no longer needed, unless there is a legal obligation to keep it.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21). You also have the right to lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.

As of 24 October 2026.