Privacy

This page distinguishes the website from the macOS app. The app details below describe the reviewed source implementation; they have not been independently verified against the downloadable release.

This website

The site uses PostHog to count page views and clicks on the download button. It runs without cookies or local storage, so nothing is stored in your browser to recognize you between visits, and each visit is counted separately. Automatic click capture and session recordings are off. There are no advertising pixels. PostHog receives ordinary request information, including your IP address, and the page’s referrer, browser and country. Fonts and screenshots are served with the website, not fetched from a font provider.

If you change the color theme, the site saves that choice in your browser’s local storage under metn-theme. It is not sent to the analytics service. Clear the site’s stored data to return to your system preference.

The hosting provider may process ordinary request information, such as IP addresses and browser information, to serve and secure the site. Links to GitHub take you to a separate service governed by GitHub’s privacy statement.

The current app code initializes PostHog, a product analytics service, at launch when a project token and host are configured. It does not currently ask for explicit consent or provide an analytics preference. It would be inaccurate to describe this implementation as opt-in.

Optional analytics require an explicit choice before collection begins, with a way to withdraw that choice. That consent flow must be implemented and verified before Metn can promise optional analytics.

What the app records

The current integration records these product actions:

Adding and removing Spaces.
Creating files and folders; renaming and deleting items.
Opening a Quick Open result and saving a document.
Switching between Edit and Preview; inserting images.

Explicit event properties describe the editor mode, image count, whether an item is a directory, and whether a new file opens in a new tab. These explicit events do not include file names, paths, search queries, or document content.

The integration also enables automatic error capture and includes log calls for app launch, document saves, and Quick Open. PostHog’s SDK can attach technical context such as app and operating-system versions, device information, timestamps, and session identifiers. The service receives connection information, including an IP address, when requests reach it.

Automatic diagnostics have not yet been audited for sensitive values. We cannot extend the explicit-event exclusions above to all diagnostic payloads, or promise that no file information can ever be transmitted. Session replay is not enabled in the reviewed configuration.

Pseudonymous identifiers

PostHog generates and stores an identifier for an app installation. Events can be linked over time to understand feature use and return visits (retention). This is pseudonymous tracking, not completely anonymous data, even when the identifier is not associated with a name or email address.

PostHog processes the analytics sent to the configured project. Its privacy policy describes its handling of personal data.

Data retention

The PostHog project’s data-retention period and hosting region have not been verified. There is no confirmed deletion schedule to publish yet. These settings, including retention for events, logs, and errors, must be confirmed before an analytics-enabled public release.

For questions about analytics records or deletion, contact hello@metn.app. Because records use pseudonymous identifiers, an email address alone may not identify an installation’s records. Do not send private documents to identify yourself.

Contact