Iconstellation Privacy Statement (v1) — DRAFT for human review

Short version: Iconstellation collects nothing. Its only network request is an update check against our own server, which carries no personal data.

• Iconstellation makes exactly one kind of network request: on startup (and when

you click "Check for updates") it downloads a small version file (latest.json) from our download server to see whether a newer release exists. The request contains no personal data, no identifiers, and nothing about your desktop. Like any web request it technically reaches our hosting provider (Cloudflare), whose standard infrastructure logs may briefly record the request; we run no analytics on it and build no profiles. If the server is unreachable, the app simply continues. There is no telemetry and no account.

• Everything the app stores lives locally on your device, under

%APPDATA%\Iconstellation:

• your original desktop layout snapshot and undo history,
• shapes you create,
• your settings (animation speed, symmetry preference, Live-mode interval),
• a first-run marker,
• crash reports (plain text, stored locally only — sent nowhere; you may attach

one to a support email yourself if you choose to. Note: a crash report contains technical error details which can incidentally include desktop icon names or file paths — review one before sharing it).

• The optional "Start Iconstellation when Windows starts" setting writes a single

registry value in your own user profile (HKCU\Software\Microsoft\Windows\CurrentVersion\Run); turning it off removes it. This is a local Windows preference, not data collection, and it is off by default.

• Uninstalling the app does not delete that folder, so your original-layout

safety net survives reinstalls. You can delete the folder manually at any time.

• Because no personal data is collected or transmitted, there is nothing for us

to sell, share, or process. If a future version adds optional features that need a network (e.g. license activation, a shape gallery, or opt-in crash reporting), this statement will be updated before those features ship, and anything that transmits data will be opt-in and disclosed.

*This draft reflects the actual behaviour of the code as of 1.6.0 (re-verified 2026-08-06: the update check is still the only network call; 1.6.0 added the settings file and the optional startup registry value, both described above). A human should re-verify against each shipped binary and have counsel confirm wording before public distribution (especially for EU/GDPR framing).*