Privacy Policy

Effective March 22, 2026

Overview

Mudlark stores everything locally on your Mac. Your notes never leave your device unless you explicitly export them. There is no analytics, no telemetry, and no tracking of any kind.

Information we collect

If you purchase a license through LemonSqueezy, your license key, a hardware model identifier, and an instance ID are sent to LemonSqueezy’s API for activation and periodic validation every 30 days. The app works offline with a grace period between checks.

This only applies to the direct download. The App Store version uses Apple’s own purchase system and does not contact LemonSqueezy.

Information we don’t collect

No analytics, telemetry, crash reports, or usage data. We don’t track which features you use, how often you open the app, or what you write. Your note content is never sent to our servers.

Data stored on your device

  • Notes: saved as .mudlark files on your Mac. No cloud sync, no iCloud.
  • Preferences: stored in macOS UserDefaults.
  • Credentials: Notion API tokens, Craft API keys and endpoints, Todoist and TickTick OAuth tokens, your license key, and instance ID are kept in the macOS Keychain.

Network connections

Mudlark only connects to external services for features you configure or for essential app functionality. Here is every connection the app makes:

  • LemonSqueezy: license key, hardware model identifier, and instance ID are sent for license activation and periodic validation. Direct download only. Privacy policy
  • Yahoo Finance: when your notes contain $TICKER lines, Mudlark sends the ticker symbol to Yahoo Finance to fetch prices. Once active, prices refresh automatically in the background. No user identifier is sent. Privacy policy
  • Notion: when you export to Notion, your note content (including any embedded images) is sent to the Notion API using your own API token. Privacy policy
  • Craft: when you export to Craft via its API, your note content and images are sent to an endpoint you configure, authenticated with your own API key. Privacy policy
  • Todoist: when you export tasks to Todoist, Mudlark connects via OAuth and sends task content to the Todoist API. Privacy policy
  • TickTick: when you export tasks to TickTick, Mudlark connects via OAuth and sends task content to the TickTick API. Privacy policy
  • Sparkle updates: the direct download version checks mudlark.io/appcast.xml for new versions. No personal data is included in this request. The App Store version uses Apple’s update mechanism instead.

Image downloads

If you reference an image by URL in a note (using the @ prefix), Mudlark downloads it directly from that URL and caches it locally.

Local exports

Mudlark can also export notes to apps on your Mac, including Bear, Ulysses, Obsidian, iA Writer, Things, Apple Notes, Apple Reminders, and Apple Shortcuts, via URL schemes, EventKit, or the system clipboard. This transfers your note content directly to the target app on your device. No data leaves your Mac during these exports.

Clipboard

Mudlark reads text, images, and file references from the clipboard for Quick Capture, and writes to it when exporting to Apple Notes or Apple Shortcuts. Clipboard content stays on your device.

Data retention & deletion

Deleted notes go to the trash for 30 days, then they’re permanently removed. Uninstalling Mudlark removes your notes and preferences. Keychain entries (API tokens, license key) may persist after uninstallation. You can remove them manually via Keychain Access.

Changes to this policy

If we update this policy, we’ll revise the effective date at the top of this page.

Contact

Questions? Email [email protected].