Privacy Notice

Last updated: November 1, 2026

Who we are

This website and our software are provided by Too Late Lab, operated by Mehmet Yaranona, Istanbul, Türkiye. We are the controller of the personal data described in this notice. For anything about your privacy, contact [email protected].

We collect as little as we can. This website uses no cookies, and we do not sell your data or use it for advertising.

What we collect and why

Beta sign-up. You join the beta by emailing us at [email protected]. We receive your email address and whatever you include in your message. We use it only for the beta: to send you the installer and to stay in touch about it. Legal basis: your consent, which you can withdraw at any time. Your emails are stored in Apple iCloud Mail, our email provider. We delete them when you ask us to.

Purchases. Our orders are handled by Paddle.com, our online reseller and Merchant of Record. Paddle collects and processes your payment and billing details as an independent controller, under its own Privacy Policy. We never see your full card details. Paddle shares with us the order details we need to deliver and support your purchase, such as your name, email address, country and the product you bought. Legal basis: performing our contract with you, and our legal obligations. We keep these details as long as needed to support your purchase and as required by law.

Support emails. If you write to us, we receive your email address and whatever you include in your message. We use it to answer you. Legal basis: our legitimate interest in answering your request, or performing our contract with you if it is about a purchase. We keep messages as long as needed to resolve your request and handle follow-ups, and delete them sooner if you ask.

Website analytics. We use Cloudflare Web Analytics to see aggregated visit statistics, such as page views, referring sites, countries and browser types. It uses no cookies, does not track you across websites and does not build a profile of you; we only see totals. Like any website, the servers that deliver it process technical data such as your IP address in order to deliver pages and protect against attacks. Legal basis: our legitimate interest in running a secure website and understanding how it is used.

Our apps

KORDER, KEEPER and TROMMER do not collect usage data, and they contain no analytics or third-party SDKs.

macOS. When you activate a licence, the app sends only your licence key, once, to our server (running on Cloudflare Workers) to check it. After that, the app works offline. Legal basis: performing our contract with you.

iOS. Purchases and licences are handled by Apple through the App Store, under Apple’s own privacy policy. The app does not connect to any server.

Cookies

This website does not use cookies.

Who we share data with

• Service providers that work for us: Cloudflare (website hosting on Cloudflare Pages, cookie-free Web Analytics, and licence activation for our macOS apps on Cloudflare Workers) and Apple (iCloud Mail), our email provider for beta and support emails.
• Paddle.com, as reseller and Merchant of Record for our orders.
• Professional advisers, such as accountants and lawyers, when needed.
• Public authorities, when the law requires it.

International transfers

Our service providers and Paddle may process data outside your country, including in the United States, the United Kingdom and the European Union. Where the law requires it, these transfers are protected by appropriate safeguards, such as standard contractual clauses or an adequacy decision.

Security

We protect personal data with reasonable technical and organisational measures: we use reputable providers, encrypted connections and access limited to what is needed. No method of transmission or storage is completely secure, but we work to keep your data safe.

Your rights

Depending on where you live, including under the EU and UK GDPR and Türkiye’s Personal Data Protection Law No. 6698 (KVKK), you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict how we use your data;
• receive your data in a portable format;
• object to how we use your data;
• withdraw your consent at any time, without affecting earlier use;
• complain to a data protection supervisory authority, such as the Personal Data Protection Authority (KVKK) in Türkiye or the authority in your country.

To make a request, including to access or delete your data, email [email protected]. We will respond within one month. We may ask you to confirm your identity first.

Changes

We may update this notice from time to time. The date at the top of this page shows when it last changed.

Contact

Too Late Lab, operated by Mehmet Yaranona, Istanbul, Türkiye
Email: [email protected]