TL;DR. Ribbon has no account and no product analytics in the app. Network calls are license checks and update checks. Window layout stays on your Mac. Card data stays with Dodo Payments. The full legal text is the Privacy Policy.
Direct answer
Ribbon does not phone home about which apps you open or how you arrange windows. Accessibility is used locally to move frames. License and update traffic are the outbound exceptions, and both are narrow.
What leaves the Mac
| Traffic | Contents |
|---|---|
| License check | License key + hash of hardware UUID (raw UUID not sent) |
| Update check | Sparkle appcast version metadata when built with updates |
| Product analytics | None |
The server stores the machine-id hash, a hash of the key, and the email from the receipt so it can deliver the key and count seats. The signed license token lives on the Mac. Ribbon rechecks at most once a week. Offline grace keeps the app unlocked until you can reconnect; Settings still opens when grace ends.
Website and payments
The marketing site, when configured, uses Plausible for page counts. Checkout runs through Dodo Payments as merchant of record; card data does not pass through Ribbon’s servers beyond what the provider needs for the charge and receipt.
What never leaves
- Strip layout and window positions as analytics events
- Keystrokes or screen contents for “improve the product” pipelines
- A Ribbon user account graph