Privacy notice

Last updated 4 October 2026

Carryover has no account, no analytics and no telemetry. Your Macs talk to each other, not to us. This page sets out everything that does leave your Macs, and where it goes.

Who we are

Ryan Anstey, trading as FableForge, Flat 103, The Antigallican Hotel, 428 Woolwich Road, London SE7 8SU, [email protected], is the data controller for the personal data described below.

What we collect, and why

Visiting this site

Cloudflare hosts fableforge.uk and keeps its standard access logs — IP address, user agent, the URL requested, the time — for a short period, to keep the site up and to block abuse. We add no analytics on top of that and we do not build a profile of you. Lawful basis: our legitimate interest in running a secure, working site.

Buying a licence

Paddle.com Market Ltd is the merchant of record for the sale. Paddle collects your name, email address, billing country and payment details under its own privacy policy; we never see your card details. From Paddle we receive your email address and the transaction id, and we store those in a Cloudflare KV store so we can issue your licence key and hand it back if you lose it. Your key carries your email address, so Carryover can show who it is licensed to. Lawful basis: performance of our contract with you. Kept for as long as the licence exists.

Update checks

Once a day Carryover fetches /carryover/appcast.xml from this site to see whether a newer version exists. That request carries your IP address and the Carryover and macOS versions. There is no identifier in it, there is nothing in it about you, your apps or your settings, and we store nothing from it beyond Cloudflare's short-lived access logs.

Emailing support

What you send us — your message, your email address, and anything you attach — sits in the support mailbox while your query is open and for a short while afterwards, in case you come back to it. Lawful basis: our legitimate interest in answering you.

What stays between your Macs

Pairing and comparing

Carryover finds your other Mac on your local network with Bonjour and talks to it directly. Nothing in that conversation passes through us or any server: the two Macs agree an encryption key when you type the pairing code, and every request after that — your list of apps, tools and settings — is encrypted between them. The keys for each paired Mac are kept in that Mac's keychain.

Keeping Macs in step (optional)

If you switch on keeping your Macs in step, Carryover writes your chosen settings to a Carryover folder in your own iCloud Drive, and your other Macs read them from there. That folder is stored by Apple under your Apple Account and its terms; we have no access to it. With this switched off, nothing is written to iCloud.

On your Mac

Carryover's settings and Activity history stay in ~/Library/Application Support/Carryover. Your licence key, the trial start date and pairing keys are kept in your keychain. Licence keys are checked offline: Carryover never contacts us to validate one.

Services Carryover contacts for you

To find where a missing app should come from, and to install what you tick, Carryover talks to these services directly. They are not ours, and we receive nothing from these requests.

Apple's App Store lookup

For apps that came from the App Store, Carryover asks Apple's public lookup service (itunes.apple.com) for the app's listing, sending the app's bundle identifier or name and your store region. No Apple Account is involved. Installing then happens in Apple's App Store app, under Apple's privacy policy.

Homebrew's cask catalogue

At most once a day Carryover downloads Homebrew's public list of installable apps from formulae.brew.sh. It is a plain download: nothing about you or your apps is sent.

Homebrew itself

If you tick Homebrew or Homebrew packages, Homebrew's own installer and the brew command download from Homebrew and GitHub. Homebrew has its own analytics setting and privacy notes; Carryover does not change them.

Developers' websites

When you choose to get an app from its developer, Carryover opens the developer's website in your browser — or a Google search for the app's name when it doesn't know the site. Those are ordinary web visits under those sites' own policies.

Who we share it with

Paddle, for payments. Cloudflare, for hosting, email routing and the KV store that holds licence records, and the email provider that hosts the mailbox our support address forwards to. Nobody else. We do not sell personal data and we do not use it for advertising.

Where it goes

Both Cloudflare and Paddle may process data outside the UK, and both operate under the UK's approved transfer safeguards — the International Data Transfer Addendum, or an adequacy decision where one applies. Their own pages carry the detail: Cloudflare and Paddle.

How long we keep things

Licence records for as long as the licence exists, because that record is what lets us recover your key. Support email while your query is open, and a short while after. Access logs for Cloudflare's own short retention period. Nothing else is kept, because nothing else is collected.

Your rights

You can ask us for a copy of the personal data we hold about you, or to correct it, erase it, restrict or object to how we use it, or port it elsewhere. Email [email protected] and we will answer within a month. One warning: if we erase your licence record we can no longer recover your key for you, so keep a copy of it first.

If you think we have handled your data badly, tell us and we will try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Cookies

This site sets no cookies of its own. The Paddle checkout on the buy page sets three strictly necessary ones — see the cookie policy.

Changes to this notice

If this notice changes, the date at the top changes with it.

Contact

Ryan Anstey, trading as FableForge, Flat 103, The Antigallican Hotel, 428 Woolwich Road, London SE7 8SU. Email [email protected].