Privacy

Last updated September 25, 2026

This policy covers the Mosaic app, its Chrome extension Mosaic Bridge, and this website. Mosaic is made by Caner Atik (“we”, “us”), who is responsible for the data described here. Write to support@mosaicanvas.com with any question.

The Mosaic app

Your boards, files, chat and voice

They're stored on your computer and on the computers of the people on the same board, and sent directly between those computers, encrypted with the board's own key. We never receive them. Files from other people are only downloaded when you use them, and are removed from your computer after a while if you don't (you choose how long in Settings).

Your profile

Your name, photo and color are kept on your computer. The people on boards you join see them, like they'd see you at a table.

Finding each other

To connect two computers over the internet, Mosaic sends short, encrypted introduction messages through public relays (Nostr relays run by third parties) and asks public STUN servers (run by Google and Cloudflare) for a network route. Like any internet service, they can see your IP address, but not your work. On the same local network, computers connect directly without them.

Web pages on your board

A web node loads a website directly from that website, on its owner's computer. Your cookies, logins and sessions stay on your computer; people on the board see the page, never your session. That website's own privacy policy applies to what it collects. Pages you mark private aren't shown to anyone else.

Checking a Team license

When you activate a Mosaic Team key, and about once a day after that, Mosaic sends the key to Polar's license service together with an anonymous identifier of your computer (a one-way hash, not the hardware ID itself), your computer's name so you can recognize it in your customer portal (for example “Maya's MacBook Pro”), your operating system and the Mosaic version. The free plan sends nothing.

AI agents and MCP

If you add an AI agent, Mosaic sends your requests, along with the parts of the board the agent needs, straight from your computer to the provider you chose (for example Anthropic, OpenAI or Google), under your own API key and that provider's privacy terms. Your API keys stay on your computer, encrypted by your operating system. Agents never see pages you've marked private. MCP services you connect are also contacted directly from your computer.

No analytics

The app has no analytics, crash reporting or advertising, and doesn't check for updates in the background.

Mosaic Bridge

Mosaic Bridge is an optional Chrome extension. It lets a tab from your own Chrome appear as a node on your board, and finishes sign-ins (such as “Continue with Google”) that need Chrome. To do that it needs broad permissions: access to the sites you open, control of the tabs you put on a board, and a connection to the Mosaic app on the same computer. It talks only to the Mosaic app on your computer and sends nothing to us. A tab you put on a board is seen by the people on that board, like any other node.

Buying Mosaic Team

Polar (polar.sh) is our merchant of record: it processes your payment (card payments go through Stripe), charges tax, emails your receipt, and keeps your license key in your customer portal. We never see your full card details. Polar shares with us your name, email address, billing country and order details, which we use to provide your license and support, and keep for our accounting and tax records as the law requires. Polar's privacy policy covers the data it handles.

Email

If you write to us, we keep the conversation so we can help you, and delete it when it's no longer needed.

This website

This site is a set of static pages. It sets no cookies and uses no analytics. Its fonts load from Google Fonts, and its download buttons ask GitHub for the latest version of Mosaic (the files download from GitHub), so Google and GitHub see your IP address when you visit. Our hosting provider keeps standard server logs (such as IP address, time and page) for security.

Your rights

Depending on where you live, you can ask to see, correct or delete the data we hold about you, or object to how we use it. Since the only personal data we hold comes from purchases and emails, a message to support@mosaicanvas.com is all it takes. We may need to keep purchase records for as long as tax law requires. You can also complain to your data protection authority.

Children

Mosaic is made for work and isn't meant for children under 16.

Changes

If this policy changes, we'll update the date at the top, and say so on this site if the change is significant.