Privacy Policy

The short version

1. Who we are

twoplus11 is an independent software studio operated by a sole developer. We build macOS apps — Grabbr, GifMint, Morphr, Stapl, Liftr, Squishr, Trimr, Scrubbr, Heftr, Redlinr, Wakr, Pulsr, Renamr, Loopr, Diskr, Sweepr, Copyr, WinKeys, Pingr, Snapr, Blockr, and Anchr — and bespoke web applications.

If you have any privacy concerns or questions, reach us through our contact form.

2. Your files stay on your Mac

These apps run entirely on your local machine. Whatever you open, record, convert, compare or scan stays on your computer. None of them:

• Send any usage data or analytics about what you do in the app (the version check in section 3 is the only thing they send)
• Store any personal information
• Use third-party SDKs, crash reporters, or ad frameworks
• Require an account, a sign-in, or any identifier tied to you

Grabbr makes direct network requests to video-sharing platforms (YouTube, Vimeo, TikTok, etc.) at your instruction, in order to download the content you ask for. These requests originate from your IP address and are your own activity — we have no visibility into them whatsoever. Grabbr also bundles the open-source yt-dlp tool and can update it when you press its update button; that download comes from the yt-dlp project's own distribution, not from us.

GifMint makes no network request other than its weekly check for a new version (section 3). Screen recordings stay exclusively on your device and are never transmitted anywhere.

Morphr converts your files entirely on your Mac, using your computer's own processing. Your files never leave your device.

Stapl performs every PDF operation — merging, splitting, compression, OCR, redaction, and the rest — locally on your Mac. Nothing you open in Stapl is ever uploaded. Its only network request is the weekly version check in section 3.

Liftr removes and replaces image backgrounds entirely on your Mac, using Apple's on-device Vision model and a bundled CoreML model. Nothing you open or export is ever uploaded.

Squishr compresses video entirely on your Mac, using a bundled encoder and your computer's own hardware. Your videos never leave your device.

Trimr trims and edits audio entirely on your Mac. Your files never leave your device.

Scrubbr reveals and strips hidden metadata (location, author, camera details, tracked changes) from photos, PDFs, and Office documents entirely on your Mac. It writes a clean copy alongside the original and never uploads anything.

Heftr analyzes what's taking up space in a file or folder and offers a smaller copy where one is available, entirely on your Mac. Your files never leave your device.

Redlinr compares two documents and produces a redline entirely on your Mac. Contracts, leases, and offers are never uploaded to a web diff tool — the comparison runs locally and your documents never leave your device.

Wakr keeps your Mac awake using the operating system's own power-management assertions. It reads and writes nothing beyond that, and has no access to your files.

Pulsr reads CPU, memory, network, disk and battery counters from the operating system's own APIs to draw its menu bar glyphs and popover. Those readings stay on your Mac — none of them are recorded to disk or transmitted anywhere, and Pulsr has no access to the contents of your files.

Renamr renames the files you drop into it, on your Mac. It reads file names — and, when you use the EXIF date token, a photo's embedded capture date — only to compute and preview the new names. Rule presets and undo logs are stored locally in ~/Library/Application Support/Renamr; nothing is uploaded, and Renamr never reads the contents of your files.

Loopr turns the still images you drop into it into a looping GIF, entirely on your Mac. It reads only those image files; your images are never uploaded, and its settings are stored locally in ~/Library/Application Support/Loopr.

Diskr maps what is taking up space on your disk, entirely on your Mac. A scan reads only filesystem metadata — item names, and how many bytes each one actually occupies on the volume — and never opens or reads the contents of your files; it moves something to the Trash only when you explicitly ask it to. Because Diskr is not sandboxed, macOS asks your permission the first time a scan reaches a protected folder such as Desktop, Documents, or Downloads, and granting Full Disk Access in System Settings lets it size those locations without prompting — that permission is between you and your own Mac, and tells us nothing. Nothing about your files — names, paths, or sizes — is ever uploaded.

Sweepr tidies a single folder you point it at, entirely on your Mac. It reads the names, extensions, sizes and dates of the items in that one folder in order to sort them into piles, and shows you the whole plan before anything moves. It moves files; it has no delete code path and never overwrites, and every sweep can be undone. Nothing about your files — names, paths, or contents — is ever uploaded.

Copyr copies files from one place to another, entirely on your Mac. It reads the files you ask it to copy and writes them where you tell it to, keeping a local record of a job's progress so it can resume after an interruption; if you enable verification it reads both copies back to compare them. That record, and any end-of-job report of files it could not read, stay on your machine. Nothing about your files — names, paths, sizes, or contents — is ever uploaded.

WinKeys remaps keyboard shortcuts, entirely on your Mac. macOS requires Accessibility access before any app can see key events, and WinKeys uses that access for one purpose: deciding whether the chord you just pressed matches one of its rules and, if it does, passing on the macOS equivalent instead. Keystrokes are rewritten in memory and are never recorded, written to disk, or transmitted — WinKeys keeps no log of what you type, and keys pressed in an app you have excluded are passed through untouched. Your settings, including which rules are switched on and which apps are excluded, stay in its preferences on your own machine.

Pingr archives the notifications macOS delivers to your Mac, entirely on your Mac. macOS deletes each notification record as soon as it is dismissed, so Pingr copies the app name, title, subtitle, body and timestamp into its own database before that happens. It requires Full Disk Access — the only permission macOS offers that reaches the notification container — and it opens Apple's notification store strictly read-only, never modifying it. That archive may include one-time codes and message previews; it is a single database file in your own Library folder, kept for a retention period you choose and pruned automatically, and excluding an app both stops it being recorded and deletes what was already stored from it. One-time codes are detected on your Mac, and a detected code reaches your clipboard only when you click it. Nothing about your notifications is ever uploaded.

Snapr moves and resizes windows, entirely on your Mac. macOS requires Accessibility access before any app can move another app's windows, and Snapr uses that access to read a window's position and size and to set a new one. It does not read window contents, and window titles are never recorded or transmitted. Your settings and any layouts you save — each recording a window's owning application and its proportional frame — stay in Snapr's preferences on your own machine. Nothing about your windows is ever uploaded.

Anchr chooses which audio device your Mac uses, entirely on your Mac. It reads the list of devices your Mac can see and sets which of them macOS treats as the default for output, for the microphone, and for system sounds. It never opens an audio stream, asks for no permission of any kind, and in particular has no microphone access. Your device preferences stay in Anchr's preferences on your own machine. Nothing about your audio devices is ever uploaded.

Blockr monitors and filters network connections, entirely on your Mac. It sees which application opened a connection and the remote host and port it was going to. It does not decrypt or proxy your traffic, and it never reads the contents of the connections it filters — with one narrow, switchable exception described below. Blockr keeps that record, your rules and your per-app totals on your own machine so they survive a relaunch; none of it is transmitted to us or to anyone else, and you can clear it at any time from Settings. Blockr installs a network filter system extension, which macOS asks you to approve once. Optionally it performs reverse-DNS lookups so that raw IP addresses read as hostnames; those queries go to whichever DNS resolver your Mac already uses, only for addresses you are already connecting to, and the feature can be switched off in Settings.

Blockr's blocklists. If you subscribe to a blocklist, Blockr downloads it directly from that list's own publisher — StevenBlack, oisd, HaGeZi or 1Hosts — at most once a day. Those are requests to their servers, not ours: they see your IP address the way any website you visit does, under their own privacy policies, and we never see that you subscribed or which list you chose. We do not host, mirror, bundle or proxy any list. Nothing is subscribed by default, and unsubscribing stops the downloads immediately.

Blockr and DNS. When a blocklist is switched on, Blockr reads the DNS replies passing through the filter — only on port 53, only the question and the addresses in the answer — so that a connection arriving as a bare IP address can be matched against lists that are written as names. This happens in memory on your Mac, is never written to disk, and is never sent anywhere; what it remembers is discarded within minutes. It is the one case where Blockr looks inside a connection rather than at its endpoints, it applies to nothing but DNS, and it can be switched off in Settings ▸ Blocklists, where it is described in the same terms. Encrypted DNS is invisible to it, as it is to every filter of this kind.

The only thing Blockr ever sends us is its weekly check for a new version, described in section 3; it carries nothing about your traffic, your rules or your Mac, and you can switch it off.

3. Checking for updates

Every one of our apps checks whether a newer version has been released. Apart from a licence check, this is the only thing they send us — so here is exactly what it is, including what we keep.

What it does. The app asks our server for a small file listing the current version. If that version is newer than the one you have, the app tells you. Nothing is ever downloaded or installed without your approval.

What it sends. The app's version number and a short label naming the app and the update framework, and — as with any request to any website — your IP address. That is the whole of it. It does not send your name, your email address, an account identifier, your license key, a list of your files, or anything at all about how you use the app.

How often. The check runs on its own at most once a week, quietly in the background, and again whenever you ask for it by hand.

What we record. For every app except Stapl and GifMint builds released before August 2026, the check goes to api.twoplus11.com and we log it: which app it was, the version it reported, the date, the user-agent string of the request, and a salted hash of your IP address — never the address itself. We do this for one reason: to see roughly how many people still run each app, so we know which ones are worth continuing to maintain. If you go on to install the update, that download is counted the same way.

What that record can and cannot tell us. It is not tied to a name, an email address, an account, or a license key, and there is no installation identifier, so we cannot work out who you are. The IP hash is re-salted every day: two checks from the same address on the same day look alike to us, which is what stops one machine being counted twice, while checks on different days cannot be linked to each other at all. We do not combine this with anything else, and we do not build a profile from it.

Stapl, and GifMint builds released before August 2026, fetch a static file from the website instead, so those checks are not recorded by us. Like every other visit to the site, they appear in our web host's standard server-access logs — see section 5.

Turning it off. Automatic checking can be switched off in each app. Doing so limits no feature — you can still check by hand whenever you like, and the app goes on working indefinitely either way.

Licence keys. Separately from updates, if you enter a commercial license key the app sends that key to our server once so it can be verified. Nothing travels with it — no file list, no usage data, no device fingerprint.

4. Commercial license purchases

If you purchase a commercial license for any of our apps, we collect:

• Your email address — used to deliver your license key and for license verification if you need to reinstall

Payment details are processed by a third-party payment provider. We do not see, receive, or store your card number or banking information.

We will never use your email address for marketing communications without your explicit opt-in. We will never sell, rent, or share it with any third party.

5. This website (twoplus11.com)

This website uses no analytics tools, no tracking cookies, and no third-party scripts of any kind. There is nothing to consent to, which is why you won't find a cookie banner.

Hostinger (our web hosting provider) may retain standard server-access logs (IP addresses, requested URLs, timestamps) as part of normal hosting operations. This includes the update checks described in section 3. These logs are outside our direct control and are not shared with us on a routine basis. Hostinger's own privacy policy governs their data handling.

6. Subdomains and other services

Subdomains such as claytonia.twoplus11.com and catclinic.twoplus11.com are separate applications with their own data handling. Their respective privacy terms apply when you use those services.

7. Data retention

The only personal data we hold is email addresses associated with commercial license purchases. We retain these for as long as necessary to provide license support. If you'd like your data deleted, contact us and we'll remove it promptly.

8. Your rights

You have the right to:

• Request access to any personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data

To exercise any of these rights, reach us through our contact form. We'll respond within a reasonable timeframe.

9. Children's privacy

Our apps and services are not directed at children under 13. We do not knowingly collect personal data from children.

10. Changes to this policy

If we make material changes to this policy, we'll update the effective date at the top of this page. We won't quietly expand data collection — if anything changes, it will be stated clearly here.

11. Contact

Privacy questions, data requests, or anything else: reach us through our contact form.