Privacy Policy

1. Who we are

This Privacy Policy applies to SEAHORSE, a desktop application and accompanying website (seahorseapp.co.uk) operated by Ironbridge Games LTD (Company No. 16882669), a company registered in England and Wales with its registered office at 2 Jarvis Place, St Michaels, Tenterden, TN30 6DQ, United Kingdom.

For the purposes of UK GDPR and the Data Protection Act 2018, Ironbridge Games LTD is the data controller for personal data we process. You can reach our data contact at henry@seahorseapp.co.uk.

2. What data we collect, and why

We have deliberately built Seahorse so that the vast majority of your data never leaves your computer. The categories below cover everything we ever touch.

2.1 Your Seahorse account

When you create a Seahorse account (via the website signup or in-app sign-in), we store the following on a Cloudflare-hosted database (D1) we operate:

• Your email address. Used to send sign-in magic links, deliver product updates, and reply to support.
• Your display name. What Seahorse calls you in the app header and in greetings. You can change it any time. Defaults to empty if you do not set it.
• Your tier: Lifetime, Trial, trial-expired, Paid, or revoked.
• Your trial expiry date (only if you are on the Trial tier).
• Your signup position (1, 2, 3...). Determines whether you are in the first-50 Lifetime cohort.
• Your purchase details if you bought a licence: the Lemon Squeezy order ID and the price you paid in pence. Required for accounting (HMRC retention).
• Your list of activated devices. For each device you sign in on: a random per-install device ID generated on first launch (not derived from your hardware), an optional device name you can edit, the timestamp it was activated, and the timestamp it last contacted our server.

That is the complete account record. We use it to know who you are across machines, whether your account is active, and how many devices you have activated against your tier's device cap.

2.2 Magic-link authentication tokens

Sign-in is by emailed magic link, no passwords. When you request a sign-in, we generate a short-lived (15-minute) one-time token, store it briefly, and email you a link containing it. The token is single-use and is deleted after consumption. We may retain a hashed reference to it for 30 days for audit (to investigate phishing or brute-force attempts). No password is ever set, transmitted, or stored.

2.3 Purchase and billing information

If you upgrade to the Paid tier, the payment is processed by Lemon Squeezy (Lemon Squeezy LLC), who act as the merchant of record. They collect and process your name, billing address, payment method, and email address under their own privacy policy at lemonsqueezy.com/privacy. Ironbridge receives only your email address and the fact that you bought a licence, attached to your account record. We never see your card number or full billing address.

2.4 Account/licence verification calls

Once you are signed in on a device, the Seahorse app contacts our account server periodically (roughly every 5 minutes while open, and on app focus) to refresh your tier and trial expiry. These calls send:

• Your session token (a signed JWT).
• Your device ID.

No conversation content, no Brain data, no connector data, no usage statistics. Cloudflare access logs (IP + user agent) are retained for 30 days for fraud detection then deleted.

2.5 Optional anonymous telemetry

If you turn it on in Settings (it is off by default), Seahorse will send a single message once per month containing: a random installation identifier, the current Seahorse version, and the month it was opened. No keystrokes, no content, no behaviour data, no personally identifiable information. The purpose is to know how many people are actively using Seahorse. You can turn it off again at any time, and any past anonymous identifiers cannot be linked back to you.

2.6 Cookies on the website

seahorseapp.co.uk uses only strictly-necessary cookies. We do not use Google Analytics, Facebook Pixel, or any cross-site tracking. If you submit the signup form, a small Cloudflare Turnstile cookie may be set to verify you are not a bot. That cookie is set by Cloudflare on a single page-load and expires shortly after.

3. What data we DO NOT collect

This list is deliberate. None of these things ever leave your computer or reach Ironbridge:

• The contents of any chat conversation you have with Seahorse.
• The contents of your Brain (memory cards, notes, reminders, calendar, journal entries).
• Any data from services you connect (Slack messages, Notion pages, Jira issues, calendar events, emails, etc.).
• Voice recordings of any kind. Seahorse converts speech to text locally and immediately discards the audio.
• Access tokens and credentials for connected services. These are stored locally on your device — in your operating system's secure keychain where supported, otherwise in your local application-data folder under your OS account protection — and are never transmitted to Ironbridge.
• API keys for optional cloud AI providers (Claude, OpenAI). These are stored locally and used by Seahorse to talk directly to those providers from your machine.

4. Optional cloud AI

Seahorse runs primarily on a local AI model on your machine, so day-to-day use sends nothing off your device. If you choose to opt in to a cloud AI provider (Anthropic Claude or OpenAI) using your own API key, the conversation context for those specific requests will be sent to that provider. From that point, the provider's own privacy policy applies:

• Anthropic: anthropic.com/legal/privacy
• OpenAI: openai.com/policies/privacy-policy

Cloud AI is off by default. You can turn it on, off, or switch providers at any time in Settings. Ironbridge never sees the content of those requests.

5. Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

• Contract, for processing your purchase and delivering your licence (Article 6(1)(b)).
• Legitimate interests, for sending product updates to existing users and for fraud-detection access logs (Article 6(1)(f)).
• Consent, for marketing emails to new sign-ups, for optional telemetry, and for any optional cloud-AI usage (Article 6(1)(a)). You may withdraw consent at any time.

6. Third-party processors

We use a small number of processors to deliver Seahorse. Each is contractually bound by a data-processing agreement.

• Cloudflare (USA, with UK/EU presence), hosts our website, OAuth Worker, signup KV, and licence server. Privacy policy: cloudflare.com/privacypolicy.
• Lemon Squeezy (USA), processes payments as merchant of record. Privacy policy linked above.
• Zoho Corporation (India / EU presence), if you receive email from us via Zoho Campaigns. Privacy policy: zoho.com/privacy.
• Anthropic and OpenAI, ONLY if you have opted in to cloud AI and used your own API key. They process data on your behalf, not ours.

7. International transfers

Some of our processors are based outside the UK. Where personal data leaves the UK or EEA, we rely on UK and EU approved transfer mechanisms (Standard Contractual Clauses and the UK International Data Transfer Addendum). Cloudflare and Lemon Squeezy have published their compliance with these mechanisms.

8. How long we keep your data

• Your account record (email, display name, tier, devices), kept while your account is active. You can delete your account at any time by emailing us; we honour the deletion within 30 days.
• Purchase records (Lemon Squeezy order ID, purchase date, price paid), kept for the lifetime of the licence plus 7 years for accounting purposes as required by HMRC.
• Magic-link tokens, used once then immediately invalidated. Hashed references retained for 30 days for audit, then deleted.
• Access logs on our Workers, kept for 30 days for fraud detection, then deleted.
• Anonymous telemetry, aggregated monthly, no per-user retention beyond the current month.

9. Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data (we will honour this within 30 days; note that licence-purchase records may be retained for HMRC compliance).
• Restrict processing while a complaint is investigated.
• Object to processing based on legitimate interests, including marketing.
• Portability, receive your data in a structured machine-readable format.
• Withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, email henry@seahorseapp.co.uk. We will respond within 30 days.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Children

Seahorse is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Security

We take the following measures to protect personal data:

• All website and API traffic is encrypted in