Privacy policy

1. Who we are

The controller of your data is The No-Code Company OÜ, the company behind Cairn (cairnflow.app).

For any privacy matter or to exercise your rights, write to us from the contact form.

2. Our principle: collect the minimum

Cairn is designed so that your work stays yours. The application is local-first and needs no accounts. We don't sell data, we don't do advertising profiling and we don't use tracking cookies.

3. The desktop application

Cairn runs on your machine. Your projects live in local .cairn files on your Mac. The app does not collect or send personal data: there's no telemetry, no accounts and your projects are not uploaded to any server. The app's only internet connection is to check for updates and, if you activate Pro, to validate your license (see point 5).

4. The website (cairnflow.app)

Cookieless analytics

We use Cloudflare Web Analytics to understand how many visits we get, where they come from (referring page and approximate country) and how many downloads there are. It's privacy-respecting analytics: it uses no cookies, creates no identifiers and does not track people across sites. The data is aggregated and does not let us identify you. That's why we don't show a cookie banner: there are no cookies to consent to.

Contact form

If you write to us from the form, we process the data you give us (name, email and message) for the sole purpose of replying to you. The submission is sent through Resend (our email provider) and, to prevent spam, the form uses Cloudflare Turnstile and a honeypot field. We keep your message for as long as needed to handle your enquiry and, afterwards, for the reasonable period required by follow-up or the law.

5. Purchase and license

Payment is processed entirely by Stripe. We never see or store your card details: they are handled by Stripe as controller/processor of that processing. When you buy a license, we store the minimum data to issue and validate it: your email, a license identifier and the dates of purchase and of update coverage. We send you the license by email (via Resend). This data is processed to perform the contract (delivering and validating your license) and to comply with our legal obligations (for example, accounting and tax).

6. Who we share data with (processors)

We only work with providers who help us deliver the service:

• Stripe — payment processing.
• Netlify — site hosting and running the contact form.
• Cloudflare — CDN, cookieless analytics, anti-spam protection (Turnstile) and delivery of the downloads.
• Resend — sending emails (license and contact replies).
• Neon — the database where we store the minimum license data.

Some of these providers may process data outside the European Economic Area; in that case they rely on recognized safeguards (such as the EU's standard contractual clauses). We do not share your data with anyone else, nor do we sell it.

7. Your rights (GDPR)

You have the right to access your data, rectify it, erase it, restrict or object to its processing, and to portability. To exercise them, write to us from the contact form and we'll reply. You can also lodge a complaint with the Estonian supervisory authority (Andmekaitse Inspektsioon) or with the authority in your country.

8. Changes to this policy

If we update this policy, we'll change the "last updated" date above. If the change is significant, we'll highlight it on the site.