Privacy notice

This Privacy notice explains how Digital Stratagems Limited (“we”, “our”, “us”) collects, uses, and protects your personal data when you use Mooring — the Mac app and the mooring.sh website. We are the data controller for that personal data, and we design Mooring to need as little of it as possible — the app runs on your Mac, so — unless you turn on the optional sync features described in 1.4 — most of this notice concerns the website and your account.

Digital Stratagems Limited
UK company number: 14268586
153–155 London Road, Hemel Hempstead, Hertfordshire, HP3 9SQ, United Kingdom
Legal & data protection: [email protected]

1. Personal data we collect

1.1. We may collect and process:

• Account data — your email address and login details.
• Usage data — IP address, browser and device information, and pages viewed.
• Support data — information you give us when you contact us.
• Marketing data — your preferences and engagement, if you opt in.

1.2. We don’t collect special-category (“sensitive”) data.

1.3. Voice input. When you use Mooring’s voice queue, your speech is transcribed using Apple’s built-in speech recognition. We never receive, store, or transmit your audio recordings — your audio is never sent to us. The resulting transcripts are saved as part of how Mooring works, on both Free and Pro, and are handled like the other data described in this notice. How Apple processes speech is governed by Apple’s own privacy policy.

1.4. Mooring telemetry and synced session data (opt-in). Mooring can send data from the app to your account, but only if you turn it on. It is off by default, with separate switches:

• Usage metrics — operational figures about how you use Mooring with Claude Code, tied to your account (for example token counts, model names, session and tool-use counts, and timings).
• Session sync — the contents of your Claude Code sessions, so you can view and search them in your account. These transcripts can include the text of your prompts, Claude’s replies, and the code and files in context, which may in turn contain confidential information or other people’s personal data. We receive this only when you switch session sync on.

We use this data to provide the sync, history, and diagnostics features in your account and to understand and improve Mooring. You can turn either switch off, and delete synced data, from your account at any time.

2. How we use your data

2.1. We use your personal data to:

• create and operate your account and authenticate you;
• provide support and answer your questions;
• send service messages about your account or important changes;
• keep the Service secure and prevent fraud;
• understand how the website is used so we can improve it;
• provide the optional sync, history, and diagnostics features, and improve the app, where you’ve turned them on; and
• send marketing communications where you’ve consented (you can opt out anytime).

3. Legal bases

3.1. We process personal data under the following lawful bases:

• Contract — to provide the account you signed up for.
• Legitimate interests — for security, fraud prevention, and improving the Service.
• Consent — for analytics cookies, marketing communications, and Mooring’s optional telemetry and session-sync features.
• Legal obligation — where we must comply with the law.

3.2. Where we rely on consent, you can withdraw it at any time.

4. Cookies and analytics

4.1. We use two analytics tools, chosen so most visitors need no cookies:

• Plausible — cookieless and privacy-friendly; it sets no cookies and doesn’t track you across sites, so it runs without consent.
• Google Analytics — uses cookies and is off by default; it loads in a cookieless state and stores nothing until you choose “Accept” on our cookie banner. We enable analytics storage only — never advertising or personalisation.

4.2. You can change your choice at any time by declining, or by clearing the stored preference and your browser cookies, which brings the banner back. There’s more detail in our cookie policy.

5. Sharing your data

5.1. We don’t sell your personal data.

5.2. We share it only with the service providers we rely on to run Mooring — our hosting and database providers, and our email-delivery, error-tracking, and analytics vendors — and only so they can do that work for us, under contracts that protect it.

5.3. We may also share data with professional advisers, with regulators or law enforcement where legally required, or in connection with a business sale or reorganisation.

5.4. We may create aggregated, anonymised data from how Mooring is used, and use, share, or sell it for any purpose, including commercial ones. This data is aggregated and anonymised so that it can no longer be linked to you or any individual. We do not sell your personal data.

6. International transfers

6.1. Some of our service providers are located outside the UK and EEA, including in the United States.

6.2. Where we transfer personal data outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or other mechanisms approved under applicable data protection law.

7. Data retention

7.1. We keep personal data only as long as we need it:

• Account data — while your account is active, and up to 6 years after closure (for tax and legal purposes).
• Usage and support data — up to 12 months.
• Synced session data and usage metrics — while your account is active; you can delete them at any time from your account, and they’re removed when you close it.
• Backups — up to 30 days.

8. Your rights

8.1. Depending on where you live, you have rights to access, correct, delete, restrict or object to the processing of, and port your personal data, and to withdraw consent where consent is the lawful basis.

8.2. To exercise your rights, email [email protected].

8.3. If you’re in the UK or EEA, you can also complain to the UK Information Commissioner’s Office (ICO) or your local data protection authority.

9. Security

9.1. We use appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls and authentication, and regular backups and monitoring. No system is perfectly secure, but we work to keep the risk low.

10. Children

10.1. Mooring isn’t for children. We don’t knowingly collect data from anyone under 18. If you believe a child has given us their data, tell us and we’ll delete it.

11. Updates to this notice

11.1. We may update this notice from time to time. If we make material changes, we’ll change the date at the top and, where appropriate, notify you by email or through the Service.

12. Contact

Questions, or a request about your data? Email [email protected], or write to us:

Digital Stratagems Limited
153–155 London Road
Hemel Hempstead, Hertfordshire, HP3 9SQ
United Kingdom