Last updated 24 October 2026
Shareling is made by Coduo Studio, LLC, a Delaware limited liability company ("we", "us"). This policy covers the Shareling apps for Mac, iPhone and iPad, the Chrome extension, the web library and this website. It says what we collect, where it goes and what you can do about it.
A link you capture holds its address, title, favicon address, preview, your note, and the date you sent or saved it. The apps store these in your iCloud account with Apple's CloudKit. A channel is a record zone shared between you and one other person through iCloud, so that person sees the links and notes you send them. Your topics, favorites, read later list, hidden links and read state are kept in your own zone and are never shared with the other person. No read receipts are sent.
Apple holds this data under its own privacy policy. We cannot read it. The web library and Chrome extension read it straight from Apple in your browser; the web library keeps its iCloud sign-in in your browser's storage for up to 14 days if you choose to stay signed in.
To show a title, favicon and preview, the Mac and iPhone apps load the page you saved directly from its website, and the web library loads its favicon. That website sees your IP address, as it would if you visited it. The Mac app renders the page off screen to take a small screenshot, without your cookies or logins.
When you capture a link, the Mac app can label the page: its type, visual style, a few tags and a one-line summary. To do that it sends the page's address, title, description and site name, up to 6,000 characters of its text, a small screenshot and a few colour measurements to our server, which passes them to Anthropic (the Claude API) as our processor. Anthropic returns the labels and does not use them to train its models. We do not store or log what is sent, only whether a request failed. The labels are stored on your Mac and are not synced.
When you drop a link on the Mac app, it can suggest which of your tags the link belongs to. It sends the page's address, title, site, type, description and keywords, together with the names of your tags, to our server, which passes them to TypeSafe as our processor and returns the suggestions. We do not store or log what is sent.
You sign in on this website with Sign in with Apple. Apple gives us your email address (or a private relay address, if you choose one) and an identifier. We keep them in a Coduo account, hosted by Supabase, that also works with our other products. Signing in sets cookies needed to keep you signed in; the Mac app keeps its session in your Mac's Keychain. When you sign in to the Mac app, we record the date of that sign-in against your account.
Purchases on this website are sold through Link, which uses Stripe's Managed Payments as merchant of record. You enter your card on Stripe's page; we never see the full number. Link and Stripe use your payment details under their own privacy policies to take the payment, work out tax and send your receipts. Stripe shares with us your email, the plan you bought, the amount and the payment status. We keep a record of your plan and its status so the apps know what you are entitled to.
If you join the waitlist we keep your email address, which button you joined from and when. If you pre-order we also keep the tier and amount. We send a confirmation email and, when Shareling launches, a launch email, through Resend. Our emails contain no tracking pixels. To be removed from the waitlist, email hello@coduo.co.
This website sends PostHog the pages you view (without the part of the address after “?” or “#”), the site that sent you, your browser, operating system, screen size and language, page-speed measurements, and errors that happen in your browser or on our server. It stores nothing in your browser, records no session or clicks, drops your IP address and does not look up your location. Email addresses and keys are removed from error text before it is sent.
In release builds, the Mac app sends crash and selected error reports to PostHog. A report may include the error, exception type, signal, termination reason, crash stack, app version, build number and macOS version. Reports are tied to a random identifier made for your install, not to your account, and contain none of your links, titles, notes or tags.
This website and our server run on Cloudflare. Our server logs errors, such as a failed request and its status code, but not the content of requests.
We only set cookies that are needed to sign you in and keep you signed in. There are no advertising or analytics cookies, so there is nothing to opt out of.
We use the data above to provide the features you ask for, to take payment and know your plan, to email you about your waitlist place, pre-order or account, and to fix crashes. Where the GDPR applies, our legal bases are performing our contract with you, our legitimate interest in keeping Shareling working, and your consent where we ask for it. We do not sell or share personal data for advertising, and we do not use it to train AI models.
You can ask us for a copy of your personal data, to correct it, to delete it, or to stop using it. Depending on where you live, laws such as the GDPR, the UK GDPR and California's CCPA give you these rights, and you can complain to your data protection authority. Email hello@coduo.co and we will reply within 30 days. We will not treat you differently for using these rights.
We and our processors (Apple, Supabase, Stripe, Cloudflare, Anthropic, TypeSafe, Resend and PostHog) may process data in the United States and other countries. Where the law requires it, transfers rely on the processors' standard contractual clauses or equivalent safeguards.
Shareling is not for children under 13, or under the age of digital consent where they live. If you believe a child has given us personal data, email us and we will delete it.
We will update this page when what we collect or who processes it changes, and change the date at the top. For a material change we will tell you by email or in the app first.
Coduo Studio, LLC. Privacy questions and requests: hello@coduo.co.