← Back to home

Privacy Policy

Last updated: May 10, 2026

Who we are

Iris is developed and operated by Andrew Cousineau, an independent developer based in Ontario, Canada.

Our commitment

Iris is a local-first application. Your data stays on your device. We do not collect, store, or process your feeds, articles, or reading activity on any server. There are no analytics, no telemetry, and no tracking of any kind built into the application.

What we collect

Nothing by default. The Iris desktop application does not phone home.

License verification is performed entirely offline on your device using public-key cryptography. No network request is made to us when you activate or use a license.

The only data we may receive is during purchase and delivery:

• License generation: when you purchase a license, our payment processor notifies our license-signing server. The server generates a signed license file and emails it to you. It stores a SHA-256 hash of your email address alongside the license record for reissue purposes. Your email address itself is not stored in plaintext.
• Purchase information: when you buy a license, our payment processor (Lemon Squeezy) collects your name, email, and payment details required to complete the transaction. We do not see or store your full payment information. Lemon Squeezy's privacy policy applies to that transaction.

What we don't collect

• Your RSS feeds or subscriptions
• Articles you read, save, or mark
• Usage patterns or analytics
• Device identifiers or fingerprints
• Location data

Cookies

This website does not use cookies or any client-side tracking. Iris the desktop application does not embed any web content that could set cookies.

Hosting

This website and the license-signing server are hosted on Cloudflare (Cloudflare Pages and Cloudflare Workers). Cloudflare may process network metadata (IP addresses, request logs) as part of their service. See Cloudflare's privacy policy.

Third-party services

Lemon Squeezy — payment processing. See their privacy policy.

Resend — transactional email for license delivery. See their privacy policy.

Your rights

Since we hold essentially no personal data about you beyond a hashed license record, there is little to access or delete. If you have purchased a license and would like your license record removed, contact us at the address below and we will delete it within 30 days.

If you are in the EU/EEA, you have rights under the GDPR including the right to access, rectify, erase, and port any personal data we hold about you. To exercise these rights, contact us at the address below.

Contact

For privacy questions or data requests, email privacy@irisreader.app.