LEGAL · PRIVACY · NOTICES
What this site does, stated plainly.
Three documents live on this page: what the website stores about you, the terms under which it is published — now in draft, shown as draft — and whose work we are standing on. Where a decision has not been made yet, the text marks it instead of inventing it.
LAST UPDATED 2026-09-21 · THIS PAGE DESCRIBES THE WEBSITE, NOT THE DESKTOP APP
TT7-02
Privacy & data processing
Who stores what — verifiable line by line in the page source.
DRAFT · CH.3 IS FACTUAL TODAY
TT7-01
Terms of use & statements
Disclosure, not an offer. The full fourteen-chapter draft.
DRAFT · AWAITING LEGAL REVIEW
NOTICES
Third-party notices
The fonts and services this site stands on — attributed precisely.
CORRECTED 2026-09-21
Creator inclusion & distribution policy (TT7-03) — the rules for getting your work listed — has its own page: inclusion.html
01 Privacy policy
Privacy & data processing — this website
Written per audience, because visitors, listed creators, and people we contact each have a different data relationship with us. Chapter 3 is a factual description of the current site — every line of it verifiable in the page source.
TT7-02 · v0.9 · 2026-09-21 · COVERS: VISITORS, LISTED CREATORS, CONTACTED PARTIES · NOT COVERED: THE DESKTOP APP (SEE ITS BUNDLED NOTICE)
Draft for consultation · awaiting legal review · not in force. Chapter 3 honestly describes the current site and may be relied on today; the creator and contacted-party chapters take effect only together with the inclusion policy. 【TBD: …】 marks a fact or decision that must be confirmed by the operating entity or counsel before this document takes effect.
CH.01Who this notice covers
This notice is written per audience, because the three groups below have entirely different data relationships with us:
| You are | Your data relationship with us | See |
|---|---|---|
| Visitors | Just browsing the website | Chapter 3 |
| Listed creators | Provided entry material and consented to inclusion | Chapter 4 |
| Contacted parties | We reached out with an invitation; you may or may not have replied | Chapter 5 |
CH.02Who processes your data
"We" means the operating entity of this website, 【TBD: full legal name of the operating entity】, which is the controller of your personal information.
Our contact details are listed in Chapter 11.
CH.03Visitors — a checklist you can verify line by line
3.1Data stored in your browser
| Key | Content | When written | Leaves your device? | How to clear |
|---|---|---|---|---|
tt.lang | The language you picked (en / zh / ja) | When you click a language button, or via a ?lang= link | No | Clear this site's data in your browser |
tt.geo | A two-letter country code, or a "lookup failed" placeholder | Only if the conditional lookup in 3.3 ever fires | No | Same as above |
- Both entries live in localStorage — not cookies — and are never sent to any server.
- The site uses no cookies at all, which is why there is no cookie banner: nothing omitted, nothing to consent to.
- In private browsing, or with site data disabled, neither entry is saved; the site still works — it just re-decides the language on each visit.
3.2What happens when fonts load
This site uses two font services. When typefaces load, your browser contacts them directly, so they learn your IP address, browser type, and visit time:
| Service | Domains | Used for | Their policy |
|---|---|---|---|
| Google Fonts | fonts.googleapis.com · fonts.gstatic.com | JetBrains Mono (monospace) | See Google's privacy policy |
| Fontshare (Indian Type Foundry) | api.fontshare.com · cdn.fontshare.com | General Sans (body & headings) | See Fontshare's privacy policy |
3.3The conditional region lookup
To pick a language you might read, the site occasionally needs your country or region. A region-lookup request happens only when all three conditions hold:
- It is your first visit (no
tt.langin your browser); - You did not specify a language via
?lang=; - Your browser reports none of English, Chinese, or Japanese among its preferred languages.
The overwhelming majority of visitors fail condition 3 — if your browser already asks for English, Chinese, or Japanese, the site simply uses it and the region request is never made.
| Item | Detail |
|---|---|
| Requested from | get.geojs.io; on failure, ipwho.is |
| What we send | A bare request — no parameters, no cookies, no referrer |
| What they learn | Your IP address (unavoidable for any network request) |
| What we keep | Only the two-letter country code, stored in your browser (tt.geo, see 3.1) — never uploaded |
| Timeout | 2.2 s; on timeout or failure we give up and use the default language |
| Frequency | At most once per browser; a failure counts and is never retried |
| How the result is used | Solely to pick the display language; if it switches your language, a one-click-undo toast appears |
Your choice always outranks the lookup: once you have manually picked a language, the site never performs a region judgment again.
3.4Hosting server access logs
This site is hosted by 【TBD: hosting provider name】. Like any website, the hosting server records routine access logs — typically IP address, time, requested URL, browser type, and referrer.
| Item | Detail |
|---|---|
| First-party download counter | A first-party script (dl.php) logs per download a timestamp, IP address, user-agent, and referrer, then redirects to the installer; it is our own server-side log, not a third-party analytics cookie, and is not used for profiling. |
| Who records | The hosting provider, as our data processor |
| Purpose | Keeping the site running and secure, troubleshooting, defense against attacks |
| Retention | 【TBD: recommended ≤ 30 days】 |
| Used to profile visitors? | No |
3.5What we do NOT do
| We do not | Detail |
|---|---|
| Run analytics or traffic statistics | There is no statistics script of any kind (no Google Analytics, no Baidu Tongji, no equivalent) |
| Serve ads or tracking pixels | None |
| Fingerprint browsers | None |
| Offer forms or accounts | No form on this site collects personal information; there is no account system |
| Sell or rent data | None — and there would be no data to sell |
| Harvest via contact links | Contact links only open your own mail client; whether you write, and what, is up to you |
3.6How to reduce what leaves your device
| If you want to | Do this |
|---|---|
| Avoid the region-lookup request | Append ?lang=zh (or en / ja) to the URL, or click a language button once |
| Avoid the font requests | Block the domains listed in 3.2 in your browser or a blocker extension |
| Erase everything this site stored | Clear this site's data in your browser settings |
CH.04Listed creators
4.1What we collect
| Category | Content | Required? | Source |
|---|---|---|---|
| Contact identity | Your handle and your chosen contact channel (email or one social account) | Required | You provide |
| Entry material | Work name, blurb, screenshots or icon, category, target-site URL | Required | You provide |
| Authorization record | Archive of your consent wording or confirmation message, its date, and its scope | Required | Our correspondence |
| Display credit | The author name you want shown publicly (a pen name is fine) | Optional; defaults to work name only | You provide |
| Supplementary material | Capability notes, tutorials, changelogs | Optional | You provide |
We do not collect: your legal name (unless you volunteer it), identity documents, phone numbers (unless you choose phone contact), your work's user data, or any account password or verification code from any platform.
4.2How it is used
| Purpose | Data used |
|---|---|
| Building and displaying your entry | Entry material, display credit |
| Contacting you about the entry (updates, dead links, policy changes) | Contact identity |
| Proving the entry was authorized by you | Authorization record |
| Handling your withdrawal, correction, or deletion requests | Contact identity, authorization record |
We will not: use your contact details for marketing unrelated to the entry; pass your contact details to any third party; or use your work in ads, PR, or media deals without your separate consent.
4.3What is public and what is not
| Publicly displayed | Never public |
|---|---|
| Work name, blurb, screenshots / icon, category, target-site URL | Your contact identity |
| Your chosen display credit (if provided) | The authorization record's original wording |
| Inclusion date, the "author-consented" trust mark | The rest of our correspondence |
4.4How long we keep it
| Data | Retention |
|---|---|
| Entry material, display credit | While listed; removed from public view within 【TBD: recommended 7 days】 of withdrawal and deleted from storage within 【TBD: recommended 30 days】 |
| Contact identity | While listed; deleted together with the entry material on withdrawal |
| Authorization record | While listed, plus 【TBD: recommended 3 years】 after withdrawal |
CH.05People we have contacted
5.1Where your contact details come from
We only contact you through channels you made public yourself: your public social account, a contact address you published on the work's page, or your identity in a public community.
We never: buy contact lists; obtain contact details from non-public sources; or scrape contact details in bulk.
5.2What we record
| Data | Purpose |
|---|---|
| Your public handle or public email | Avoiding repeat contact |
| Contact date and channel | Same; and to cap follow-ups at the policy limit |
| Your public work name and URL | Stating why we reached out |
| Your reply, if any | Handled according to your reply |
5.3How long we keep it
| Your status | What we do |
|---|---|
| No reply | After at most one follow-up, the contact record is deleted after 【TBD: recommended 90 days】 |
| Replied "not now" | Same as above |
| Replied "do not contact me" | We keep one minimal record — your public handle or email plus a do-not-contact flag — and never contact you again, permanently |
| Consented to inclusion | Transfers to Chapter 4 |
CH.06Sharing with third parties
We never sell, rent, or trade personal information.
To run this website and the inclusion program, we delegate necessary data handling to the following categories of service provider:
| Service category | Data involved | Provider |
|---|---|---|
| Website hosting | Access logs | 【TBD】 |
| Correspondence with creators and contacted parties | 【TBD】 | |
| Social-platform messaging | Your messages on that platform | The platform itself |
We require processors to handle data only for the purposes above and to apply appropriate security measures.
Legally mandated disclosure: if a competent authority makes a lawful demand, we cooperate within the bounds of law and, where permitted, tell you.
CH.07Cross-border transfers
The font and region-lookup services in Chapter 3 may run servers outside your country. When your browser contacts them, your IP address travels with the request.
Creator and contacted-party data we hold ourselves is stored in 【TBD: storage location】. If any transfer of personal information abroad is involved, we will fulfill notification and consent obligations under 【TBD: applicable law, e.g. PIPL and its regulations】.
CH.08Your rights
| You may | How | Our response |
|---|---|---|
| Access the data we hold about you | Email the address in Chapter 11 | Reply within 【TBD: recommended 15 days】 |
| Correct inaccurate data | Same | Same |
| Delete your data | Same | Same; the special arrangement for authorization records is in 4.4 |
| Withdraw consent (delist an entry) | One sentence, no reason needed — see TT7-03 Chapter 6 | See TT7-03 |
| Stop being contacted | Reply to any message saying so | Effective immediately |
| Get a copy | Email and ask | Provided in a common format |
| Complain | To us, or to 【TBD: supervisory authority】 | — |
CH.09Security
Creator and contacted-party data we hold is protected in proportion to its sensitivity: access limited to necessary personnel; contact records and authorization records stored separately; no case details discussed in public channels.
The data we hold is small to begin with — the most effective security measure there is. We deliberately collect only what we need, so even an incident would have a limited blast radius.
If a security incident may affect your rights, we will notify you promptly as the law requires.
CH.10Minors
Neither this website nor the inclusion program is directed at minors. If we learn that a minor's personal information was collected without guardian consent, we will delete it promptly.
CH.11Contact us & changes to this notice
| Matter | Channel |
|---|---|
| Privacy questions, exercising your rights | 【TBD: dedicated privacy@traytool.com recommended; hello@traytool.com in the interim】 |
| Operating entity | 【TBD】 |
Changes to this notice are published here with an effective date. Amendments that widen collection are announced at least 【TBD: recommended 30 days】 before taking effect, and every listed creator is notified individually. Historical versions remain available.
APP.AFull data inventory
| # | Data | Subject | Stored in | Leaves device? | Retention | Legal basis |
|---|---|---|---|---|---|---|
| D-01 | tt.lang language choice | Visitor | Visitor's browser | No | Visitor-controlled | Delivering the requested function |
| D-02 | tt.geo country code | Visitor | Visitor's browser | No | Visitor-controlled | Same |
| D-03 | IP (font requests) | Visitor | Google / Fontshare | Yes | Per their policies | 【TBD】 |
| D-04 | IP (conditional region lookup) | Visitor | geojs / ipwho | Yes | Per their policies | 【TBD】 |
| D-05 | Server access logs | Visitor | Hosting provider | Yes | 【TBD: ≤ 30 days】 | Site operation & security |
| D-06 | Contact identity | Creator | Us | — | Listing period + 30 days after withdrawal | Consent |
| D-07 | Entry material | Creator | Us + public display | — | Same | Consent |
| D-08 | Authorization record | Creator | Us (never public) | — | 3 years after withdrawal | Proving authorization |
| D-09 | Contact records | Contacted party | Us | — | 90 days | 【TBD】 |
| D-10 | Do-not-contact flag | Contacted party | Us | — | Permanent (minimal) | Respecting the refusal |
APP.BPre-publication checklist
| # | Check | Status |
|---|---|---|
| B-01 | Chapter 3 checked line-by-line against this site's source (especially 3.2 font sources, 3.3 trigger conditions) | Open |
| B-02 | Fontshare added to the site's privacy section (factual correction — did not wait for legal review) | Done 2026-09-21 |
| B-03 | All 【TBD】 items resolved | Open |
| B-04 | Appendix A's "legal basis" column confirmed by counsel | Open |
| B-05 | Chapter 5 retention aligned with the follow-up cap in TT7-06 | Open |
| B-06 | Do-not-contact list storage and lookup procedure in place | Open |
02 Terms of use
Terms of use & statements — this website
A fourteen-chapter draft, published as a draft on purpose: it states what this website is, what it is not, and marks every decision still open instead of filling the blanks quietly.
TT7-01 · v0.9 · 2026-09-21 · COVERS: BROWSING TRAYTOOL.COM AND ITS SUBPAGES · NOT COVERED: THE DESKTOP APP (ITS BUNDLED LICENSE) AND CREATOR INCLUSION (TT7-03)
Draft for consultation · awaiting legal review · not in force. Publishing it in draft state is deliberate — the honest-baseline discipline applies to our own legal text too. 【TBD: …】 marks an item the operating entity or counsel must confirm before this document takes effect.
SUMMARYRead this first — plain language, non-binding
- This website is a specification, not a contract offer. The roadmaps, target figures and phase plans on it are our plans, not promises to you. Anything marked phase P2 or "design goal" has not been done yet.
- Measured figures carry their measurement date. After that date the figure may already have changed; we update it, but we do not guarantee it is current at every moment.
- You may browse, quote and redistribute this website's content freely — attribution ("Source: traytool.com") is enough. What you may not do is put the TrayTool name or marks on anything that could be mistaken for an official release by us.
- Third-party works shown here belong to their authors — copyright and brand alike. They appear because their authors agreed, and their appearance is not our endorsement.
- This website collects no name, no email, no payment information, and has no account system. Privacy details: TT7-02 above.
- We will revise these terms, announce changes in advance, and keep every old version readable.
CH.01Definitions & scope
1.1Definitions
| Term | Meaning |
|---|---|
| This website | The website at the domain traytool.com and all of its pages, including share-link landing pages (/w/…) |
| We | The operating entity of this website, 【TBD: full legal name of the operating entity】 |
| You / visitor | Anyone who visits or uses this website |
| TrayTool / the host | The Windows desktop software we develop and publish |
| Plugin | A functional unit packaged to the TrayTool plugin contract and runnable in the host, including built-in and third-party plugins |
| Listed entry | Information about a third-party work displayed on this website or in the plugin library with its creator's authorization (see TT7-03) |
| Edition | A declarative manifest describing a set of plugins, default parameters and first-screen layout |
| Share link | A URL generated by a user, pointing to one edition or plugin manifest |
1.2Which document governs what
| What you are doing | Document that applies |
|---|---|
| Browsing this website | These terms + TT7-02 privacy & data processing notice |
| Downloading and using the TrayTool desktop app | The software license bundled with its installer |
| Being a creator whose work we list | TT7-03 creator inclusion & distribution policy |
CH.02Acceptance of these terms
By visiting or using this website you have read and agreed to these terms. If you do not agree, please stop using this website.
This website has no accounts and never asks you to click "agree". These terms bind through your use of the website itself, and their scope is limited to the public, browsing use of it.
If you are younger than 【TBD: the age set by the applicable law】, please browse with a guardian's company and consent. This website offers no service that requires personal information from minors.
CH.03The nature of this website's content
3.1Disclosure, not an offer
Everything on this website — product introductions, feature descriptions, pricing notes, roadmaps, cases and demos — is information disclosure. Absent a separate signed contract, none of it constitutes an offer, promise, warranty or contractual term of any kind.
3.2Three kinds of content, three natures
| Content type | How to recognize it | Nature |
|---|---|---|
| Measured fact | Carries a measurement date (e.g. "measured 2026-09-07") or appears in the "measured today" column of the honest-baseline table | A truthful statement of the state on that date; it may change afterwards |
| Design target | Carries a phase number (P0–P5) or the words "design goal", "planned", "will" | Our plan and intent, not a promise; may be adjusted, deferred or cancelled |
| Demo & illustration | Interface mockups, sample editions, sample share pages (e.g. /w/demo) | Explains the design thinking; plugin names, usernames, version numbers and data in them may be fictional |
We work to keep measured facts accurate and correct them when we find they are not. But we do not guarantee that the website reflects the product's newest state at every moment.
Items whose price is not settled yet (such as the Pro edition) are marked "$—" or "announced at launch". Until officially announced, nothing on this website about them constitutes a price commitment.
3.5About roadmap changes
We may adjust the scope, order or timing of any roadmap phase. For published commitments that affect creators' or developers' interests — for example zero commission on self-distribution, or the compatibility promise — we commit to:
- any adjustment that works against the other side takes effect only for cooperation started after the adjustment announcement;
- being announced on this website at least 【TBD: 30 days recommended】 in advance;
- stating the reasons in the announcement.
CH.04Software downloads
This website provides the download entry for the TrayTool desktop app. Downloading, installing and using that software is governed by the software license bundled with the installer, not by these terms.
We will publish the installer's SHA-256 checksum at release. You are advised to verify it yourself before installing. For installers obtained anywhere other than this website, we cannot vouch for their integrity or provenance.
The platform support marked "current" on this website (at present Windows 10 / 11 x64 only) is as stated in that version's release notes.
CH.05Intellectual property
5.1This website's content
The text, layout, diagrams and interface designs on this website are ours unless marked otherwise.
You may: browse, print and keep website content for personal use; quote it in commentary, reporting, teaching and research with attribution ("Source: traytool.com") — no permission needed.
You may not: copy this website as a whole for commercial use without written permission, or redistribute its content in a way that makes it look like an official release by us.
5.2Name & marks
"TrayTool", the tray glyph, and this website's visual identity elements are the marks we use to identify the product's origin.
| Situation | Permission needed? |
|---|---|
| Mentioning TrayTool in an article, review or tutorial | ❌ Not needed |
| Saying your plugin "runs in TrayTool" or "is built for TrayTool" | ❌ Not needed — but it must be true |
| Using "TrayTool" in your product name, app icon or domain | ✅ Written permission needed |
| Using TrayTool marks to imply we produced, certified or endorse your work | ⛔ Not allowed |
5.3Open-source parts
Parts of TrayTool's base components are planned for open-source release, under a license type 【TBD: see TT5-03 §3.3 open point】. That code is governed by its own licenses. Open code does not mean an open name: derivative works based on it must not use the TrayTool name or marks as their product name.
5.4Third-party content
Third-party work names, marks, screenshots and descriptions appearing on this website remain with their respective rights holders. They are shown with the holders' authorization (see TT7-03) or under lawful fair use. We claim no rights over them.
CH.06Visitor conduct
While using this website, you must not:
- interfere with the website's normal operation in any way — including denial-of-service attacks, malicious code, or automated scraping beyond normal browsing intensity;
- attempt to access the website's servers, backends or any non-public area without authorization;
- forge share links or generate them under someone else's name to trick others into installing plugins;
- use this website to spread unlawful content or to infringe anyone's legitimate rights;
- impersonate us or our staff, including contacting anyone in messages, email or communities as "TrayTool official".
CH.07Third-party links & listed entries
This website may link to third-party sites, works or services, including the creator sites that listed entries point to. Those sites are run independently by their own operators.
Inclusion is not endorsement. A work appearing on this website or in the plugin library only means its creator agreed to be listed. It does not mean we have reviewed, approved, recommended or vouched for the work's quality, safety, legality, or its operator's trustworthiness.
7.3What the trust badges mean — exactly this, nothing more
| Badge | It means | It does not mean |
|---|---|---|
| Indexed · author-authorized | The author agreed to be listed on the material they provided | That we have examined the work itself |
| ⚠ Unverified source | The publisher's identity could not be verified | — |
| ⬤ Signed | The publisher is email-verified and signs the plugin package | That the plugin is safe |
| ✦ Reviewed | The platform ran basic checks (manifest legality, signature, known malicious signatures) | That we guarantee the code |
Third-party sites carry their own terms and privacy policies. We are not responsible for their content, availability or data handling.
CH.08Share links
Share links are generated by TrayTool users and point to one edition or plugin manifest. Their content is the responsibility of the user who generated them.
By design a share link carries manifest information only — no credentials, passwords or personal data. Any page that asks you to enter account details through a share link is not ours.
A share page lists every plugin the manifest involves and every permission they request. Read it in full before confirming an install. Whether to install is your decision.
If you find a share link used to mislead, defraud or spread malicious plugins, report it per Chapter 11.
/w/ are design previews.CH.09Disclaimers
This website is provided "as is" and "as available". To the maximum extent permitted by applicable law, we make no warranties of any kind, express or implied — including merchantability, fitness for a particular purpose, non-infringement, and the accuracy, completeness or timeliness of content.
We do not guarantee the website will be uninterrupted, error-free, or free of malicious code.
The website may pause for maintenance, upgrades or force majeure; we will announce in advance wherever possible.
Nothing in this chapter affects rights you have as a consumer under applicable law that cannot be waived by agreement.
CH.10Limitation of liability
To the maximum extent permitted by applicable law, we are not liable for any indirect, incidental, special or consequential loss arising from using or being unable to use this website.
Given that this website is free and charges nothing, and to the extent applicable law allows, our total liability arising from it is capped at 【TBD: cap wording to be confirmed by counsel】.
This chapter does not limit or exclude: liability for damage caused by our intent or gross negligence; liability for personal injury; and anything else the applicable law does not allow limiting or excluding.
CH.11Reports, complaints & notice-and-takedown
If you believe any content on this website infringes your lawful rights (including copyright, trademark, reputation or privacy) or is misleading or fraudulent, send us notice through the Chapter 14 channels.
A notice should include: your identity and contact details; the exact location of the content (URL or screenshot); the right you claim and its basis; and why you believe the content infringes or violates.
11.3Our handling commitments
| Step | Commitment |
|---|---|
| First reply | Within 【TBD: 3 business days recommended】 of receiving the notice |
| A rights holder asking to remove their own work | No reason required — handled immediately (see TT7-03, chapter 6) |
| Other cases | After verification: annotate / suspend display / remove |
| The reported party | Told what was complained about and given a chance to respond (except in urgent cases) |
| Outcome | Told in writing to both sides, with reasons |
Bad-faith complaints — fabricated facts, borrowed identities, or complaints aimed at unfair competition — may be refused and pursued.
CH.12Changes to these terms
We may revise these terms. Revised terms are published on this website with a version number and an effective date.
Material changes — ones that widen your obligations, restrict your rights, or change how disputes are resolved — are announced at least 【TBD: 30 days recommended】 in advance.
Version archive: every historical version of these terms stays available on this website — never deleted, never overwritten.
Continuing to use this website after a change takes effect means you accept the changed terms.
CH.13Governing law & disputes
These terms are governed — as to formation, validity, interpretation, performance and dispute resolution — by 【TBD: governing law】.
Disputes out of these terms go to friendly negotiation first; failing that, to 【TBD: court or arbitration body】.
If any provision of these terms is held invalid or unenforceable, the remaining provisions stand.
CH.14Contact us
| Matter | Channel |
|---|---|
| General questions, creator cooperation | hello@traytool.com |
| Reports, complaints, rights notices | 【TBD: a dedicated legal@traytool.com recommended】 |
| Operating entity | 【TBD: full name】 |
| Postal address | 【TBD: address】 |
APP.APre-publication checklist
| # | Check | Status |
|---|---|---|
| A-01 | All 【TBD】 items replaced | Open |
| A-02 | Practicing lawyer has reviewed — priority on chapter 3 (disclosure), 9, 10 and 13 | Open |
| A-03 | Chapter 6 item 5's official-channel list matches chapter 14 | Open |
| A-04 | Badge meanings in 7.3 match the site and library UI copy word for word | Open |
| A-05 | Historical-version archive page ready (chapter 12.3) | Open |
| A-06 | The old "not yet drafted" note on legal.html#terms replaced in sync with publication | Done 2026-09-21 |
APP.BChange log
| Version | Date | Change |
|---|---|---|
| 0.9 | 2026-09-21 | First consultation draft |
03 Third-party notices
Third-party notices — what this site stands on
Plain HTML, CSS and JavaScript with no build step and no framework. The third-party work underneath is attributed precisely — corrected on 2026-09-21.
This website is plain HTML, CSS and JavaScript — no build step, no framework. It stands on the following third-party work:
- General Sans — served by Fontshare (api.fontshare.com, cdn.fontshare.com) under the ITF Free Font License.
- JetBrains Mono — served by Google Fonts (fonts.googleapis.com, fonts.gstatic.com) under the SIL Open Font License 1.1.
- geojs.io and ipwho.is — free IP geolocation endpoints, used only under the conditional first-visit fallback described in the privacy section.
- Hosting — whoever hosts these files sees ordinary web-server request logs; see privacy appendix A, row D-05.
- The desktop host ships its own third-party notices with the installer, covering the .NET runtime and the components each built-in plugin uses. Those are the authoritative ones for the application itself.
Found something attributed incorrectly or missing? That is a bug, and we would rather hear about it than have it stand — hello@traytool.com.