Privacy Policy

Effective date: April 8, 2026 · Applies to: ShadowTag for macOS

ShadowTag does not collect, track, or share your personal data. All processing happens entirely on your device.

Overview

ShadowTag is a professional audio metadata editor for macOS. It is developed and published by Ryan Francesconi, operating under the Spongefork name. This policy describes what information the app accesses, what it stores, and the single case in which data is voluntarily transmitted over the network.

Data Collected and Stored Locally

ShadowTag stores the following data on your device only, inside the macOS App Group shared container and your local Application Support folder:

Playlist data — file references you add to playlists, organized into groups. Stored as JSON files. Your audio files are never copied; only their locations are recorded.
Waveform cache — rendered waveform data derived from your audio files, used to display waveforms without re-reading files. Stored locally and keyed by a SHA-256 hash of each file URL.
Thumbnail image cache — small artwork thumbnails extracted from audio file metadata. Stored locally and keyed by a SHA-256 hash of each file URL.
Workspace state — window layout, playback settings, and other application preferences. Stored locally in Application Support.

None of this data leaves your device unless you explicitly submit a feedback report (see below).

File Access

ShadowTag requests access to audio files and folders that you explicitly open or drag into the application. The app reads and writes metadata within those files only. It does not scan your file system without your direction, and it does not transmit file contents over the network.

On-Device Audio Analysis

ShadowTag includes automated analysis features — loudness measurement (EBU R128), BPM detection, musical key detection, and sound keyword classification. All analysis runs entirely on your device using local processing. No audio data is sent to any server.

In-App Purchases

ShadowTag offers an optional Pro upgrade through the Mac App Store. All purchase transactions are handled exclusively by Apple through StoreKit. Spongefork does not receive or store your payment information. Apple's privacy policy governs this process: apple.com/legal/privacy.

Voluntary Feedback Submission

ShadowTag includes an optional feedback form. If you choose to submit a bug report or feature request, the following information is sent to a server operated by Spongefork:

Your feedback text (type, title, and description as you entered them)
Your email address, if you choose to provide one
Basic system information: chip model, architecture, amount of RAM, and macOS version
App version and build number

This information is used solely to respond to your feedback and to diagnose reported issues. It is not sold, shared with third parties, or used for advertising. Feedback is submitted only when you explicitly trigger the action; no data is sent automatically or in the background.

Analytics and Tracking

ShadowTag does not use any analytics SDK, crash-reporting service, or behavioral tracking library. No usage data, session information, or user identifiers are collected or transmitted.

Third-Party Services

ShadowTag does not integrate with any third-party advertising, analytics, or data-broker services. The only external service the app contacts is Apple's StoreKit for in-app purchase validation, and the Spongefork feedback endpoint described above — only upon your explicit action.

Children's Privacy

ShadowTag does not knowingly collect personal information from children under the age of 13. The app contains no features designed to collect data from children.

Data Retention and Deletion

All data stored by ShadowTag lives on your device and is fully under your control. You can delete it at any time by removing the app or clearing its container data through macOS. Feedback submissions sent to Spongefork's server are retained only as long as necessary to address the reported issue and are not linked to persistent user accounts.

Changes to This Policy

If this policy changes materially, the updated version will be posted at this URL with a new effective date. Continued use of ShadowTag after such changes constitutes acceptance of the updated policy.

Contact

Questions about this privacy policy can be directed to the support page:

spongefork.com/support