Privacy Policy

Horse does not track what you browse.

Privacy in the Horse app and privacy on browser.horse are separate. The app does not send us your browsing history. The website uses analytics, advertising, checkout, and email services when you visit browser.horse. Those website services do not see the sites you visit inside Horse.

Your browsing history, saved Trails, Notes, and passwords stay on your computer. Saved passwords are stored locally, and Horse uses your operating system’s credential encryption where that facility is available. Horse does not upload these records to our servers or collect them as product telemetry.

Horse makes a small number of service requests needed to activate the app, check for updates, and keep it working:

We use this information to provide licenses and updates, prevent trial and license abuse, and understand whether that single product setting is in use.

Release builds use Sentry to report failures in Horse and its extension integration. A report can contain the technical error, Horse stack trace, app and operating-system information, process or extension-lifecycle details, and normal network metadata. If Horse itself fails while working with a page, the report can also include incidental page context such as that page’s URL.

Horse drops errors that originate in external websites and third-party extensions. We do not use error reports to build a browsing history or track what you browse.

Website analytics and advertising apply to browser.horse and checkout. They can tell us which page, affiliate, or ad introduced a signup or purchase. They do not see the sites you visit inside Horse.

We may process the page and entry page you visit, referrer, campaign and advertising-click information, IP address, browser and device information, and first-party or Meta advertising identifiers.

Plausible provides aggregate website analytics. Meta Pixel records page views and advertising events. Rewardful provides affiliate attribution. Our first-touch attribution records the initial route into browser.horse.

We process the contact, account, billing, tax, purchase, coupon, subscription, and attribution information needed to provide and administer your account or purchase. This can include your name, email, phone number, billing address, country, tax identifiers, IP address, user agent, referral or campaign details, and subscription status.

Stripe handles your full payment-card details. Horse does not receive your complete card number.

Loops stores email contacts and preferences, sends license, service, onboarding, and marketing messages, and receives subscription lifecycle events. New purchasers are currently added to Horse news emails unless the address is already globally unsubscribed. Every marketing email includes an unsubscribe link.

Supabase stores accepted form submissions and the information you deliberately enter. A Bug Report can include your email address, operating system, Horse version, description, affected-site URL, and an optional public evidence link. Horse stores the link, but does not upload or copy the linked screenshot or recording.

Vercel hosts the forms and BotID checks submissions for automated abuse. They may process ordinary request and bot-detection data. This data is not added to the stored report row.

We run Meta ads. The website sends Meta page-view and selected checkout events. For server-side conversion measurement, Meta may receive hashed contact, billing, account, and license identifiers, plus unhashed IP address, user agent, Meta browser and click identifiers, event source URL, event type, value, and currency. Hashing reduces direct readability, but it does not make linkable data anonymous.

We use cookies and local storage for sign-in, checkout, affiliate attribution, first-touch attribution, and Meta advertising measurement.

The first-touch cookie can retain the initial landing page, timestamp, external referrer, campaign fields, and advertising-click identifiers for up to 90 days. Meta browser and click identifiers are also retained for up to 90 days by our current implementation. Attribution copied into a purchase record can be kept for longer with that record.

You can block or clear cookies in your browser settings. Account, checkout, and attribution features may then work differently or stop working.

Each service processes data under its own privacy terms. Some act on our behalf. Stripe and other providers may also process information for their own legal, security, and service obligations.

Superpencil OÜ is a company established under the laws of the Republic of Estonia, registry code 14932474, address Sepapaja 6, Tallinn, Harju county 15551, Estonia, in the European Union.

This policy describes data processed by the Horse desktop app and services, browser.horse, checkout, accounts, email, and the website forms.

Payment and tax records are retained as required for accounting and legal obligations. Account, license, email, attribution, form, and operational records are kept while needed to provide Horse, prevent abuse, communicate with you, or meet legal obligations.

Horse does not currently apply one automatic expiry period to every category of operational record. Valid deletion requests are handled subject to records we must keep for legal, accounting, security, or legal-claims purposes.

Depending on where you live, you may have rights to access, correct, erase, restrict, object to, or receive a portable copy of your personal data. You can also unsubscribe from marketing email at any time. The European Commission explains these data-protection rights.

To make a request, use the privacy request form. We may ask for information needed to verify your identity. Where the GDPR applies, we respond without undue delay and in principle within one month.

If we update this policy, we’ll post the changes here.