Privacy
Last updated 9 October 2026
Inlay is a small Windows program made by one person. This page explains, in plain words, what happens with personal data when the website is visited, when signing up, and when the app is used. Questions go to kayra@inlay.works.
The short version
- The app works on the computer it is installed on. Screenshots, documents and browsing information are never uploaded.
- The only personal data collected is the email address given at sign-up.
- The website does not use cookies or analytics, and the fonts are hosted on the site itself.
The app
To do its job, Inlay reads new screenshots from the clipboard and the Screenshots folder, finds the open Word document, and looks at the title of the window being used, and at the web address in supported browsers, to write the source line under each picture. All of this happens on the computer. None of it is sent anywhere.
Settings (citation style, pop-up and sound choices, coffee break reminder, start-up option) are stored in a small file in the user’s own profile folder (%APPDATA%\Inlay). Deleting that folder removes them.
If the app checks a licence key against a server, only the licence key and the app version are sent, and nothing about the documents or screenshots.
Sign-up
Signing up needs an email address, and a message is sent to it to check that it is real. The address is used to send a personal download link, to count how many people have joined, and to reply to messages. It is not sold, shared for advertising, or used for anything else.
Legal basis: the address is processed to provide the download and licence the person asked for, and to keep the service secure and running.
Email sent to the contact address
Messages to kayra@inlay.works are forwarded to a private inbox, and are kept only as long as needed to answer them.
Who helps run it
The website, its domain and the email forwarding run on Cloudflare. The domain is registered with Hostinger. The sign-up list is stored in a Cloudflare database. Sign-up emails are sent through Resend. These providers handle data only to run the service and have their own privacy terms.
How long data is kept
A sign-up address is kept while the licence is in use, and deleted when the person asks, or when the service ends.
Rights
Everyone can ask to see, correct, or delete their data, or object to its use, by writing to kayra@inlay.works. Complaints can also go to the data protection authority of the person’s own country.
Changes
If this page changes in a way that matters, the date at the top changes too.