PRIVACY
What stays on your computer.
Annotator processes drawings, screen pixels and typed text on your computer. It does not upload them to a cloud service.
If an AI app controls Annotator
The AI app may send screenshots and text to its model provider. That app has its own permissions and privacy settings. Check them before using private information. Read the AI setup guide.
Files you save
A board keeps your drawings editable, including original pasted images under covers. Do not share a board containing private details. PNG export saves an image on your computer. Open the exported file and check it before sharing; blur can still leave details readable.
Drawing needs no screen access. Zoom, live pixel effects and region sharing need Screen Recording permission, but Annotator does not record or save a video. On Windows, the matching setting is Screenshots and screen recording.
Region sharing composes a chosen desktop area into a local window. Your meeting app sends it only when you choose to share that window. Anything inside the area can appear, including notifications. Pausing replaces the output with an opaque view; the region is not restored automatically on your next launch.
Feedback you choose to share
You can write a report in Annotator without sending it. Open GitHub draft sends your title, details and app version to GitHub in a browser link. Submitting it there makes the issue public. Remove private details before opening GitHub. No drawings, screenshots or logs are attached automatically.
Copy support info includes app and macOS or Windows versions, number of screens, permissions, update and login settings, and current app state. It does not include drawings, screenshots or document names. Copying or saving this information does not upload it; review the text before sharing it.
Updates and diagnostics
On a Mac, and in the Windows copy from winget or a download, update checks contact the release server. Its host receives connection information, including your IP address. Annotator does not send drawings or screenshots in update checks. Automatic checks are on at first and run at most once a day, and again when you open the menu if the last check was more than 6 hours ago; turn them off in Settings > General. Sparkle system-profile sharing is off. After an update, What's changed shows notes included with the app, without another request.
Optional app usage counts
Share usage counts is off by default. If you turn it on, Annotator sends at most one request a day with app version, macOS major version, chip type, opt-in date and broad feature-use counts. A random installation ID links daily records. Counts use ranges, not exact event times. No drawings, screenshots, text, file names or hardware IDs are included.
The server stores a keyed hash of that random ID, not the original ID. Raw daily records are removed after 45 days; totals without identifiers are kept. Turning sharing off deletes the local ID and unsent counts. Re-enabling creates a new ID. An already sent request cannot be recalled.
Annotator for Windows doesn't send usage counts yet. Share usage counts stays off and says counts aren't available.
On a Mac, app errors use local system logs, with error details marked private, and no automatic crash reports are sent to us. macOS may handle its own diagnostics according to your system settings.
Microsoft Store and Windows
If you get Annotator for Windows, the Microsoft Store and Windows collect some information outside Annotator, under Microsoft's own terms. Annotator doesn't control this. Updates also come from the Store, so those connections go to Microsoft.
In Microsoft's Partner Center, we can see how many people got and installed Annotator from the Store. These are totals and broad groups, such as country and Windows version.
Windows sends its own diagnostic data to Microsoft, as set in Settings > Privacy & security > Diagnostics & feedback. From that data, Partner Center can show us usage totals and crash reports for Annotator. A crash report can include part of Annotator's memory from the moment it crashed. Annotator for Windows sends no crash reports of its own.
Store and Partner Center totals are separate from Annotator's usage counts and this website's counts. Read Microsoft's privacy statement.
Coffee reminders and contributions
All tools are free. To time coffee reminders, Annotator counts days when you draw. Those counts stay on your computer. Not now snoozes a reminder for at least 30 days; another reminder also requires further active use.
The Buy me a coffee link opens Buy Me a Coffee only when you click it. That service and its payment providers handle contributions under their own terms and privacy policies. This website does not collect card details or load a payment widget.
Website hosting
Netlify hosts this website and the usage-count service. It receives normal connection information, including IP addresses. The collector does not read or store IP addresses or user-agent strings. Hosting logs are separate from our count records; we have not confirmed their retention period. Read Netlify's privacy policy.
This site counts one visit per browser tab and download clicks. It uses a random ID in sessionStorage, not cookies or localStorage. Events contain only a page category and a broad source category, never the full URL or referrer. Global Privacy Control and Do Not Track stop these counts. Raw records are removed after 45 days.
GitHub release-download totals and Homebrew's public install totals are separate from app and website counts. They are not a count of unique people. The private owner dashboard uses a secure, eight-hour sign-in cookie; ordinary site visitors do not get that cookie.
Before sharing your screen
App or window sharing may leave out Annotator's drawings and covers. Hiding, quitting or an app crash removes visible covers. Remove private details from your material and ask someone on the call to check their view. Read the screen-sharing limits.