# Iconstellation Privacy Statement (v1) — DRAFT for human review

**Short version: Iconstellation collects nothing. Its only network request is an
update check against our own server, which carries no personal data.**

- Iconstellation makes exactly **one kind of network request**: on startup (and when
  you click "Check for updates") it downloads a small version file
  (`latest.json`) from our download server to see whether a newer release
  exists. The request contains no personal data, no identifiers, and nothing
  about your desktop. Like any web request it technically reaches our hosting
  provider (Cloudflare), whose standard infrastructure logs may briefly record
  the request; we run no analytics on it and build no profiles. If the server
  is unreachable, the app simply continues. There is no telemetry and no account.
- Everything the app stores lives **locally on your device**, under
  `%APPDATA%\Iconstellation`:
  - your original desktop layout snapshot and undo history,
  - shapes you create,
  - a first-run marker,
  - crash reports (plain text, stored locally only — sent nowhere; you may attach
    one to a support email yourself if you choose to. Note: a crash report contains
    technical error details which can incidentally include desktop icon names or
    file paths — review one before sharing it).
- Uninstalling the app **does not delete** that folder, so your original-layout
  safety net survives reinstalls. You can delete the folder manually at any time.
- Because no personal data is collected or transmitted, there is nothing for us
  to sell, share, or process. If a future version adds optional features that
  need a network (e.g. license activation, a shape gallery, or opt-in crash
  reporting), this statement will be updated **before** those features ship, and
  anything that transmits data will be opt-in and disclosed.

*This draft reflects the actual behaviour of the code as of 1.0.0-beta.1. A human
should re-verify against the shipped binary and have counsel confirm wording
before public distribution (especially for EU/GDPR framing).*