Privacy Policy

Last updated: April 2026

Who we are

Escribano is operated by Eduardo Sánchez Bautista, Lübecker Strasse 15, 10559 Berlin, Germany ([email protected]). References to “we”, “us”, or “Escribano” in this policy refer to this sole operator.

What the app collects

Nothing. The Escribano macOS app captures your screen locally and runs all analysis (VLM inference, LLM summarisation) entirely on your own machine. No screen data, frames, observations, or generated artifacts are transmitted to any server. Your work stays on your device.

What this website collects

Server access logs

Our web server records standard access log entries for each HTTP request. These entries include your IP address, the requested URL, the HTTP referrer, the date and time of the request, and your browser’s User-Agent string. This processing is technically necessary to operate and secure the service. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Access logs are retained for 14 days and are then deleted automatically. No log data is shared with third parties.

Analytics

This site uses Umami Analytics (self-hosted on European infrastructure at analytics.raus.cloud). For each page view, Umami transiently processes: the page URL, the HTTP referrer, the browser User-Agent string, and the approximate country derived from your IP address. Your IP address is not stored. No cookies are set, no cross-site tracking occurs, and no personal identifiers are retained or linked to you. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding aggregate site usage). Individual page-view request data is processed transiently and is not retained as personal data. Only aggregated, non-personal analytics statistics are stored on European infrastructure. No data is shared with third parties.

No cookies

This site sets no tracking or advertising cookies. The only browser storage used is localStorage for your theme preference (light/dark/system). This constitutes technically necessary storage under § 25(2) Nr. 2 TTDSG — no consent is required, and this data never leaves your browser.

Beta access requests

If you submit your email address using the “Request access” form on this site, your email address is stored in a self-hosted database running on our own European infrastructure (raus.cloud). Your email is used solely to contact you regarding beta access to Escribano. Legal basis: Art. 6(1)(a) GDPR (your consent, given at the time of submission). You may withdraw consent and request deletion of your email address at any time by writing to [email protected]. Your email is not shared with any third party.

You have the following rights regarding any personal data we process:

Access (Art. 15 GDPR) — You may request confirmation of whether we process personal data about you and obtain a copy.
Rectification (Art. 16 GDPR) — You may request correction of inaccurate personal data.
Erasure (Art. 17 GDPR) — You may request deletion of your personal data where a legal basis for retention no longer exists.
Restriction of processing (Art. 18 GDPR) — You may request that we limit how we process your data in certain circumstances.
Data portability (Art. 20 GDPR) — Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
Right to object (Art. 21 GDPR) — You have the right to object at any time to processing of your personal data that is based on legitimate interest (Art. 6(1)(f) GDPR), including any profiling based on that provision. To exercise this right, contact us at [email protected]. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.
Withdraw consent (Art. 7(3) GDPR) — Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Berlin supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.

Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. No decisions producing legal or similarly significant effects are made about you automatically.

Online dispute resolution

The European Commission provides an online dispute resolution (ODR) platform for consumers: https://ec.europa.eu/consumers/odr. We are not obligated to participate in dispute resolution proceedings before a consumer arbitration board and do not currently do so.

Contact

For any privacy-related questions: [email protected]