Privacy
This website
This site sets no cookies, runs no scripts, loads nothing from other servers and uses no analytics or trackers. It is served by a Cloudflare Worker with logging turned off and no log export, so we keep no access log; Cloudflare handles each request to deliver it.
Reef on your phone
Reef downloads the catalogue and packages from the Reef repository. Like any web server, the repository sees your IP address and which files you download; it keeps no access log. Reef has no store account and sends no usage data.
Paid apps and hosted services
The controller for the data below is Patrick Quinn, trading as Shipwright, 31 Watson Park, Killiney, Co. Dublin, A96 W9W3, Ireland. Paid apps are bought through Paddle.com, our reseller and merchant of record. Paddle receives your payment details, name, email address and country, under its own privacy notice; we never see your card. From Paddle we receive the order: its number, the app, the amount, and Paddle's customer number, which we keep with the licence so we can help with a lost licence, a refund or a chargeback. The licence itself holds no personal data. The hosted services (Shoal Messages and Shoal Push) are described in the documents below. They are drafts and are not yet in force. Questions: privacy@reefstore.app.
Privacy policy: Shoal Messages and Shoal Push (hosted service)
Draft privacy policy for the hosted services.
Shoal Messages and Shoal Push: data flow and data map
What data the hosted services hold, where, and for how long.
Per-bridge review checklist
Engineering research notes on the Signal and Telegram terms of service. Not legal advice, not a policy.