Privacy

Last updated 23 October 2026

Vitrine is a Mac app for collecting design references. This page covers two separate things: this website, and the app itself. They are measured differently, and the app is the stricter of the two.

The short version: there are no accounts, nothing is sold or shared for advertising, and nothing you collect in the app — your references, notes, file names or the addresses you save from — ever leaves your Mac.

Who is responsible

Vitrine, reachable at harry@joinvitrine.com. It is a small independent project rather than a company with a privacy department, so that address reaches a person directly.

This website

Two analytics tools run on this site, both of them to answer the same question — which parts of these pages are worth keeping:

• Google Analytics, for page views and a small set of named moments such as starting and finishing the waitlist form.
• Microsoft Clarity, which records how a page is used.

Until you choose “OK” on the cookie banner, none of them set a cookie or store anything in your browser. They still count the visit, without anything that identifies the browser it came from. Choosing “No thanks” keeps it that way; ignoring the banner counts as no.

Session recording

If you choose “OK”, Clarity records how the page is used: pointer movement, scrolling, clicks, and which elements they landed on. This is used to find parts of the page that do not work, and nothing else.

What you type is masked. Input fields — including the email field on the waitlist form — are replaced with blanks before a recording is stored. Recording is not on when you decline, and there is no recording anywhere in the app.

The waitlist

If you give us your email address, it is stored with Loops, an email service, and used to tell you when Vitrine opens up. It is not used for anything else and not passed to anyone. Every email has an unsubscribe link, and asking at the address above removes you.

Analytics records that someone joined and which traffic they came from. It does not receive the address.

The private beta

Access is by invitation. When a code or an invited address is checked, and when a build is downloaded, that is recorded in PostHog, hosted in the European Union, so it is known how many invitations are actually used. Those records are written by the server rather than by your browser, and they carry no address, no code and no download link — only whether the attempt succeeded, which door was tried, and which kind of file was taken.

The app

The Mac app is anonymous by design. There is no account and no sign-in. It is identified to analytics only by a random identifier generated on your Mac, which means nothing anywhere else and is not connected to this website, to your email address, or to anything you do here.

It reports a short, fixed list of counts: that it was opened, how many distinct days it has been opened, whether a capture succeeded or failed and for which of a few named reasons, which kind of surface was used, the app version and your region setting.

It never sends:

• Your references, images, videos or anything else you save
• Notes, board names, section names or anything you type
• File names, folder paths or the web addresses you save from
• Error messages, which can quote any of the above

This is enforced in the code rather than promised: every event is one of a fixed set of cases, and every detail attached to one comes from a fixed list of words. There is no path by which free text can be attached to an event.

You can turn it off entirely in the app’s menu, and it stops sending immediately and discards anything waiting to be sent.

Where this data goes

PostHog, which receives only the beta records and what the app reports, is hosted in the European Union. Google Analytics, Microsoft Clarity and Loops are operated by companies based in the United States and may process data there. Each publishes its own privacy terms, which govern what they do with what they receive.

How long it is kept

Analytics records are kept while they are useful for improving the product and are not kept indefinitely; session recordings are removed on the recording tools’ own schedules, which are measured in weeks or months rather than years. A waitlist address is kept until you unsubscribe or ask for it to be removed.

Your choices

• Decline analytics cookies on the banner, or change your answer with “Cookie settings” at the foot of the home page.
• Turn off telemetry in the app’s menu.
• Unsubscribe from any email, or write to the address above.
• Ask what is held about you, or ask for it to be deleted, at the address above. Because the app keeps no identity, there is usually nothing held that can be traced to you in the first place.

Children

Vitrine is a professional design tool and is not directed at children.

Changes

If what is measured changes, this page changes with it and the date at the top moves. A change that widens what is collected will be reflected here before it starts.