Privacy Policy

Last updated: October 20, 2026

We wrote this to be read. Showcaser is an app for iPhone, iPad and Mac that publishes a calm website for the things you sell in person, at your-name.showcaser.app or your own domain. We call that website a showcase. Visitors look, then call, text, email or visit you. There is no checkout, no account and no database.

Two kinds of people meet Showcaser, and this policy speaks to both: owners, who make a showcase in the app, and visitors, who open one in a browser. If something here isn't clear, contact us through the form on our support page.

The short version

• There is no account. No email, no password, no name. A showcase belongs to a key that the app keeps in your iCloud Keychain. Whoever holds the key owns the showcase. We don't keep a copy of it, except while we set a showcase up for you (see What stays on your devices).
• What you publish is public. Your showcase's name, contact details, pages, listings and photos are on the open web, for anyone and for search engines. That is what a showcase is for.
• Some things you keep private. A listing you hide, or one whose status is kept off the site, stays in our storage but isn't shown. Fields you mark app-only, and a listing's status note, are encrypted on your device with your showcase's own key before they reach us: we store them and can't read them.
• Photos lose their hidden details on your device. The app makes new copies of each photo at three sizes and writes them with no metadata, so a photo's location and camera details never reach us. Videos are re-encoded with location and other personal details dropped.
• Visitors leave nothing behind with us. No cookies, no analytics, no tracking, no forms, no visitor accounts. When a visitor calls, texts or emails an owner, that goes from the visitor's own phone or email straight to the owner, never through us.
• We don't sell personal information, share it for advertising, run ads, or put analytics or tracking in the app or on the sites.
• What we can't control: Cloudflare, which hosts the sites under our agreement with it, sees the technical details of every web request, as any host does. And an owner answers for what they publish and for how they treat the people who contact them.

Who we are, and what this policy covers

Showcaser is published by Manolab, LLC, a California limited liability company ("Manolab", "we", "us"). This policy covers:

• the Showcaser app for iPhone, iPad and Mac (on the App Store as Showcaser Listing);
• the service that stores showcases and serves them as websites, at name.showcaser.app and at owners' own domains;
• this website, showcaser.app.

It does not cover:

• what an owner does with what you send them. When you call, text or email an owner, or visit them, you deal with them directly. Their own privacy practices apply;
• Apple, which runs the App Store, iCloud Keychain, Apple Maps and your device's operating system;
• your phone carrier, email provider or messaging app, which carry your calls, texts and emails to an owner;
• the registrar or DNS provider that holds an owner's own domain.

What we hold for a showcase, and why

A showcase is a folder of files in our storage, on Cloudflare. The app writes them; our service builds the website from them. Here is everything in the folder.

What is public, because you publish it

• The site: its name, tagline, introduction, footer, header photo, look (theme, fonts and layout), and its pages (each a title, text and any photos).
• Contact details, if you give them: a phone number, a text number, an email address, a street address and opening hours. They are shown on your showcase so visitors can reach you. Don't publish details you don't want public.
• Listings whose status is shown on the site: each one's status, summary, description, the fields your listing schema shows, and its photos and videos.
• The search list of your shown listings (a file the page uses to search and sort in the visitor's browser), and a sitemap for search engines.

Why: to publish your showcase. This is the service.

What we store but don't show

• Hidden listings, and listings with a status you keep off the site. They are stored with everything else and served only to your app, in a request signed with your key.
• Fields you hide in your listing schema, and fields you remove while keeping their values. Their values stay in your listings in our storage, readable by us, but no page shows them. (To keep a value from us too, make the field app-only instead; see below.)
• Your showcase's public key and when the showcase was made, so our service can check that each change is signed by your key. The private key, the part that signs, never leaves your devices.
• The people you invite. Each person you invite to help with your showcase gets a key of their own, made on their device. We keep its public key, the name you gave them, their role (Owner or Editor), who invited them and when, and when they last changed something, so the app's People page can show who has access and you can remove them. An invite itself is kept until it is used, or at most 24 hours for a link and fifteen minutes for a QR code. An invite link carries its code after the #, which browsers don't send, so it never reaches our servers until the app uses it.
• Your subscription, once plans are on. When you buy a plan, the App sends us the purchase as Apple signed it. We keep what it says that we need: the App Store's number for your subscription, which plan and period, when it renews or ended, whether it was refunded, a random identifier the App made for you (Apple's "app account token", never your Apple ID or payment details), and which showcases it pays for. Apple also tells us directly when a subscription renews, fails to renew, ends or is refunded. We also keep how much storage each showcase uses. Why: to keep each showcase on the plan that pays for it, to know when a plan is full or has ended, and to take a lapsed site off the web rather than delete it.
• Your addresses: the name.showcaser.app names your showcase has claimed, and your own domain if you connect one, with the identifiers Cloudflare gives it and whether it is working yet.
• Old addresses you ask us to keep working, from a site you moved from.

Why: to give your app back what it published, to keep your listings ready to show again, and to know which key may change the showcase.

What we store and can't read

App-only fields and the status note. A field you switch off the website (for example, what you paid, or the date you bought something), and a listing's status note, are sealed on your device before they are sent: encrypted to your showcase's sealing key (elliptic-curve key agreement and AES-GCM). Every person on your showcase holds that key and we never do: we keep only copies of it locked to each person's own key, and an invite carries one locked to a secret in its QR code. We store the sealed text and give it back to your app; we can't open it. The limit, stated plainly: anyone on your showcase, and anyone who holds your recovery key, can open them. Removing someone stops their changes, but what they already read can't be taken back; re-sealing gives the showcase a new sealing key, so they can't read new values.

Photos and videos

The app prepares every photo on your device before it is uploaded: it makes copies at 1600, 800 and 400 pixels on the long edge and writes them as JPEG files with no metadata at all, so the original's location, camera and date details are not in them. A video is re-encoded to 720p with its location and other personal metadata dropped, plus a still frame for its poster. The app doesn't enhance or generate anything in a picture.

Each photo and video is stored under a name made from its own contents (a long, unguessable code), and anyone who has that address can load it, from any address of your showcase. A listing's page shows its photos; a hidden listing's photos aren't linked from any page, but they are at the same kind of address. Deleting a listing doesn't delete its photos and videos from our storage: ask us and we will (see Your rights).

What the app sends when you change something

Every change your app makes is signed with your showcase's key. A request carries your showcase's public key, the time and the signature, and the change itself. Like any request on the internet, it comes from an IP address. Cloudflare's rate limiter counts writes per IP address to stop runaway uploads; our service doesn't store the address. The app also asks our service, without signing, whether an address you are typing is free, and fetches the fonts and layouts it offers you.

Your own domain

If you connect your own domain, our service registers it with Cloudflare so Cloudflare can route it to your showcase and issue its security certificate. To show you how it is going, our service looks up the domain's public DNS records and nameservers through Cloudflare's public DNS resolver, and names your DNS provider from them. We never hold or change your domain's DNS: you change its records yourself, where it lives. When you disconnect it, we remove it from Cloudflare and from our storage.

What stays on your devices

• Your showcase's key is kept in your iCloud Keychain, which Apple syncs to your other devices signed in to the same Apple ID. It is what makes the showcase yours.
• Your recovery key is the same key written as one line of text (and a QR code), so you can add the showcase to another device or keep a copy safe. Whoever holds it owns the showcase. We don't have it, and we can't recover a showcase whose key is lost.
• If we set a showcase up for you (for example, by moving your old website over), we make its key, publish with it, and hand it to you as a recovery key. Until then we hold that key; once you tell us you have it, we delete our copy.
• The list of showcases on this device, and the themes you made, are kept in the app's own storage on the device.
• Your app account token, a random identifier made once, is kept in your iCloud Keychain so a purchase on any of your devices is recognized as yours. It is not your Apple ID and says nothing about you.
• The camera is used only when you ask: to take a photo for a listing or a page (Take a Photo…), and to scan a recovery key's QR code with Apple's live scanner. A photo you take is made ready like any other and leaves the device only when you publish; the scanner takes and keeps no photo.
• Your photo library is reached only through Apple's picker, which hands the app the photos and videos you choose. On the Mac, the app also takes the files you drag in or choose in the Finder.

Removing a showcase from a device takes it off that device's list; its key stays in your iCloud Keychain, so you can add it back.

Visitors to a showcase

If you are visiting someone's showcase, this is what happens.

• Our service builds the page and sends it to your browser. The page, its photos and its fonts all come from the showcase's own address. It loads no advertising, analytics or tracking scripts, and the showcase sets no cookies of its own. (Cloudflare, our host, may set a strictly necessary security cookie to tell people from automated traffic.)
• Search and sorting run in your browser, over the showcase's public list of listings. What you search for isn't sent to us.
• A showcase may remember your light or dark choice in your browser's own storage, if it offers the switch. It never leaves your browser.
• Call, Text and Email are links that open your own phone, messages or email app, addressed to the owner. What you send goes from your provider to the owner and never passes through us. The address link opens Apple Maps, which receives the address under Apple's privacy policy. A link an owner puts in a description takes you to that other website, under its own policies.
• View on your wall (on iPhone and iPad, for a piece with real dimensions) builds a 3D file from the piece's photo when you ask for it. Nothing about you goes into it, and it isn't kept in our storage.
• Like any website, the request your browser makes carries technical details, such as your IP address, browser and the address you asked for. Cloudflare, our host, processes them to deliver the page and protect it from attack. Our service keeps no record of your visit.

The owner of a showcase is responsible for what it shows, including any personal information about other people in a listing or a photo, and for how they treat what you send them. If something on a showcase is about you and you want it changed or removed, ask its owner first, using the contact details on the showcase. If that doesn't work, or the showcase breaks our rules, tell us (see Contact).

What we don't do

• We don't sell personal information, and we don't "share" it for cross-context behavioral advertising, as California law uses those words.
• We don't run advertising in the app, on showcases or on this website, and we don't use anyone's information to target ads anywhere.
• We don't track anyone across other companies' apps or websites.
• We don't put analytics, advertising or tracking software in the app or on the sites, and the sites set no cookies of their own.
• We don't count views. There is no "your listing was seen 40 times": nothing about a visit is recorded by our service.
• We don't take messages for owners. There are no contact forms on showcases; visitors reach owners directly.
• We don't hold an account for you: no email, password or name is needed to make a showcase.
• We don't keep your key or your recovery key, except a showcase's key while we set it up for you, until you have it.
• We don't read app-only fields: they reach us sealed.
• We don't receive your photos' location or camera details: the app leaves them out.
• We don't take payments. There is no checkout; a sale happens between people.
• We don't train AI models on showcases, and we don't give them to anyone to train theirs.

Issue reports

You can report a bug, suggest a feature or ask a question from the form on our support page. The app doesn't have its own report form yet. A report from the support page carries:

• what you type: the kind of report, a title, a description, and what it is about (the iPhone, iPad, Mac or a website);
• your name and email only if you enter them; leave both blank and the report is anonymous;
• the page you sent it from, your browser's description of itself (its "user agent"), and your language setting.

Reports go through Manolab's issue-reporting service, which runs on Cloudflare, uses your IP address to limit abuse and passes it to Cloudflare's Turnstile check, which tells people from automated abuse. The report becomes an issue in a private issue tracker we keep on GitHub; reports are not public. Don't put anything in a report you wouldn't want our team to read, and never your recovery key: it is the ownership of your showcase. We keep a report until its issue is closed and for one year after that. To have a report removed sooner, or your name or email taken off it, ask us (see Contact), and we will remove it.

This website

This website uses no advertising or analytics cookies and runs no analytics or tracking pixels. Cloudflare, our host, may set a strictly necessary security cookie to tell people from automated traffic. If you choose a theme, the choice is remembered in your browser's own storage and never sent to us. The report form on the support page loads Cloudflare's Turnstile check, run by Cloudflare under its own privacy policy. Like any website, our host processes the technical information every web request carries, such as your IP address, to deliver the page and protect it from attack.

Do Not Track and Global Privacy Control. Because we don't track you across sites or sell or share your information, we treat these signals as already honored: there is nothing for them to switch off.

The same is true of every showcase (see Visitors to a showcase).

Who we share information with

We share information only as this policy describes:

• Everyone, for what you publish. A showcase is a public website: anyone, including search engines, can see, copy and keep what it shows.
• Service providers who run parts of the service for us, under contracts that limit their use of it: Cloudflare (hosting, storage, domains and certificates, abuse protection, the issue-reporting service) and GitHub (issue reports). See the subprocessor list.
• Apple, where you use Apple's services (the App Store, iCloud Keychain, Apple Maps).
• When the law requires it: to respond to valid legal process, after checking it is valid and, where we can, telling the owner concerned first.
• To protect people and the service: to investigate fraud, abuse or security incidents, or to protect the rights, property or safety of owners, visitors, the public or us.
• If our business changes hands: in a merger, acquisition or sale of assets, information may pass to the new owner, who will be bound by this policy for the information it receives. We will say so on this website before it happens.

How long we keep information

If a subscription lapses, your showcase's site stays up for 30 days, then comes off the web. It is not deleted.

Your rights

Wherever you live, you can ask us to tell you what personal information we hold about you and give you a copy, correct it, delete it, stop or limit using it, or withdraw a consent you gave. Ask through our support page. We will confirm the request comes from you (usually by an email address you gave us), act on it within 45 days (we will tell you if we need longer, as the law allows), and confirm when it is done. If we decline, you can appeal by replying to our answer. We won't treat you differently for asking.

If you own a showcase

Most of what we hold, you control directly in the app: change or remove your contact details and pages, edit, hide or delete listings, give up an address, disconnect a domain. For the rest, ask us:

• A copy of your showcase (its files: the site and listings as readable JSON, and the photos and videos). The app doesn't have an export yet; until it does, we will send you a copy.
• Removing photos and videos a deleted listing used, or deleting your whole showcase from our storage. The app can't do either yet.

There is no account to check you against, so we will ask you to show you hold the showcase's key, for example by changing your showcase's tagline to a word we give you, from the app. Never send us your recovery key.

If you are a visitor, or someone shown on a showcase

We hold nothing about visitors. If a showcase shows personal information about you, ask its owner first. If you can't reach them, or they won't act, tell us through the support page with the showcase's address, and we will look at it under our Acceptable Use Policy.

People in the European Economic Area, the United Kingdom and Switzerland

Who decides. An owner decides what their showcase publishes, and is the controller of the personal information in it, including anyone else's. Manolab is the controller of the information described above that we use for our own purposes: running and protecting the service, and issue reports. This is why we use it, and on what legal basis:

Giving us your name or email in a report is optional; without them, we can't reply to you. We don't make decisions about anyone based solely on automated processing. We have not appointed a data protection officer.

You have the rights of access, rectification, erasure, restriction and portability, and the right to complain to your local data protection authority.

Your right to object. Where we rely on our legitimate interests, you can object at any time, on grounds relating to your situation, and we will stop unless we have compelling legitimate grounds or need the information for legal claims.

Residents of California and other US states with privacy laws

We follow the California Consumer Privacy Act and similar state laws as a voluntary commitment, whether or not their thresholds apply to us, and we extend the rights below to everyone in the United States. We don't sell or share personal information, don't use it for targeted advertising, and don't use it for profiling.

In the last 12 months we collected these categories, from you or your device, for the purposes above, and disclosed them only to the service providers listed under Who we share information with (and, for what an owner publishes, to the public, at the owner's direction):

• Identifiers: a showcase's public key; the name and email in a report, only if you give them; the technical identifiers of requests.
• Commercial information: the listings an owner publishes.
• Internet or other electronic network activity: request details, and the details in a report.
• Contact details an owner publishes, and the photos and videos they publish.

You, or an agent you authorize, can use these rights through the support page. If you are not satisfied with our answer to an appeal, you can contact your state attorney general.

International transfers

Manolab is in the United States, and our service runs on Cloudflare's global network, with showcases stored where Cloudflare's storage keeps them. Information may be processed in the United States and other countries whose laws differ from yours. When you send us an issue report from outside the US, you send it to us in the United States.

Children

Showcaser is not directed at children. You must be at least 18 (or the age of majority where you live) to make a showcase. We don't knowingly collect personal information from anyone under 18, and never knowingly from a child under

1. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

When we change this policy, we will update the version and date at the top and keep earlier versions published on this site. If a change is material, we will tell you at least 30 days before it takes effect where we reasonably can, in the app or on this website. A change that would let us use information in a way What we don't do rules out applies only to information collected after the change, and only with your consent.

Contact

Questions, requests, or something on this page you think is wrong: contact us through the form on our support page (say it's a privacy request; leave out anything sensitive, and never your recovery key). For formal legal notice, contact us through the support page too.

We read every message.

Manolab, LLC