Privacy Policy

Toss collects nothing about you. There is no account, no analytics, no crash reporting, no advertising identifier and no telemetry. There is no Toss server, so there is nowhere for your data to go.

Applies to Toss for macOS, version 1.0.0. Last updated 8 September 2026.

Who is responsible

Under the GDPR, the data controller is:

There is no Data Protection Officer. Toss is made by one person, and that person reads the email above.

What Toss keeps, and where

Everything you drop on the shelf is copied onto your own Mac, into this folder:

~/Library/Containers/com.danieljurma.toss/Data/Library/Application Support/Toss

That copy stays on your Mac. Toss does not upload it. Toss cannot read it remotely. There is no cloud account and no sync.

Toss is sandboxed by macOS. It asks the system for two things and nothing else:

• the files you hand it yourself, by dropping them on the shelf or by choosing a folder in Save to…;
• outgoing network access.

Toss does not read your Documents folder, your clipboard, your browsing history, your contacts, your calendar or your location. The sandbox does not allow it.

The two moments Toss uses the network

Two things use the network. You start both of them.

1. You drop a web link on the shelf. Toss opens that page once and reads its title, so the item has a name you can recognise.
2. You drag a picture off a web page, and the page hands Toss a web address instead of the image itself. Toss fetches that address so it has a real picture to keep.

Be clear about what that means. In both cases the request goes to somebody else’s website. That website sees your IP address and a user agent string, exactly as it would if you opened the page in a browser. That is how the web works, and Toss cannot hide it. This is the one place anything leaves your Mac.

Toss sends nothing else with the request. No name, no identifier, no account, no list of your other items. Each request uses a fresh in-memory session, so no cookie and no cached copy is written to disk.

If you never drop a link, and never drag a picture off a web page, Toss makes no network requests at all.

Third parties

Toss shares your data with nobody. There is no analytics provider, no crash reporting service, no advertising network, no cloud storage and no artificial intelligence service. No third party holds data on our behalf, so there is no third party for us to hold to a standard.

Two other parties are involved in using Toss at all, and neither is one we chose for you:

• The website you point Toss at, in the two cases above. It is a site you were already visiting. We have no relationship with it and no control over it. Its own privacy policy applies to that request.
• Apple. Toss is sold through the Mac App Store. Apple handles the purchase, the download and the updates, under its own privacy policy. Apple never gives us your name, your email address or your payment details. Read Apple’s Privacy Policy.

How long it is kept, and how to delete it

Everything Toss keeps is on your Mac, so you decide.

• One item. Remove it from the shelf and the copy is deleted straight away. Toss keeps one copy, not two, and it does not go to the Trash first. Once it is gone it cannot be brought back.
• Everything. Delete Toss and its container goes with it, and every copy inside it. To be certain, delete the folder shown above by hand.

We hold nothing, so there is no retention period on our side and nothing for us to delete on your behalf.

There is no consent to withdraw, because Toss processes no personal data. If you would rather nothing ever left your Mac, do not drop web links on the shelf and do not drag pictures off web pages.

If you write to us

If you email the address above, we hold your email address and your message for as long as it takes to answer you, and for no more than twelve months after that. Then we delete it. The lawful basis is our legitimate interest in answering your question, under GDPR Article 6(1)(f).

That is the only personal data we are ever likely to hold, and it is data you chose to send us.

Your rights

Because we hold no personal data about you, there is usually nothing to show you, correct or erase. The GDPR gives you these rights anyway, and you may use them at any time:

• Access — ask what we hold about you.
• Rectification — ask us to correct it.
• Erasure — ask us to delete it.
• Restriction and objection — ask us to stop using it.
• Portability — ask for a copy in a usable format.

Write to d_jurma@yahoo.com. We answer within one month. There is no charge.

You may also complain to a supervisory authority. In Romania that is the Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro. If you live elsewhere in the European Union, you may complain to your own national authority instead.

Children

Toss is not aimed at children, and it collects nothing from anyone, of any age.

Changes to this policy

If Toss ever changes what it does with data, this page changes at the same time, and the date near the top changes with it. This page is the current version. There is no other.