EnvelopeCoder Privacy Policy
Effective July 2026. Applies to EnvelopeCoder for macOS, published by Hughes Software.
Your data stays on your Mac, with one exception that you control.
The exception: address normalization
When you press the normalize (wand) button, or use the system-wide Normalize Address service, the address text you selected is sent over HTTPS to Geocodio, a third-party geocoding service, and the normalized result comes back. That is the only network traffic the app generates. No lookup ever happens without your explicit action.
Normalization uses your own Geocodio account and API key; you deal with Geocodio directly, under Geocodio's privacy policy and terms. If an address is something you would not send to a third party, don't normalize it; everything else in the app works without the wand.
Everything else is local
Contacts. If you use the Contacts search field, your address book is searched on your Mac with your permission (macOS asks the first time). Nothing is uploaded.
Printed-envelope history and saved return addresses. Names and addresses you print or save are stored only in this Mac's preferences. Every entry is individually deletable in the app, and Clear History removes the lot. They never leave your Mac.
Diagnostics log. Off by default; the app writes no diagnostics unless you enable Save normalization diagnostics log in Settings. When enabled, normalization runs are recorded in a small self-trimming log inside the app's private container, for troubleshooting with support. It is never transmitted anywhere by the app; you choose whether to email it to us.
Your Geocodio API key. Stored in your login keychain, not in any preferences file.
Purchases and the free trial
EnvelopeCoder is sold through the Mac App Store. Apple processes all payments; we never see your payment details. The free trial is measured from your App Store download date, which the app reads locally from its App Store receipt. We operate no servers and receive nothing about your purchase, your trial, or your use of the app.
No analytics, no tracking
The app contains no analytics, telemetry, crash reporting, advertising, or tracking of any kind, and makes no network connections other than the user-initiated Geocodio lookups described above. This website is a static page with no cookies and no third-party scripts.
Children
EnvelopeCoder is a general-audience utility and is not directed at children.
Changes
If a future version of the app changes any of the practices above (for example, optional iCloud sync), this policy will be updated before that version ships, with the effective date revised.
Contact
Privacy questions: support@hughes.global. EnvelopeCoder is published by Hughes Software, a trade name under which Paul Hughes operates a sole proprietorship in the District of Columbia.