Skip to content

sec · privacy

Privacy Policy

Last updated April 24, 2026

Contour is a native macOS application for interactive image and video segmentation. This policy describes what data the app handles, what leaves your Mac, and what does not. In short: your images never leave your Mac, and we do not run any server that receives your work.

Who this policy covers

This policy applies to the Contour macOS app and to this website at contour.mgcrea.io. It does not cover third-party websites or services you may reach by following links from the app or site.

Summary

  • All image processing happens on your Mac, on Apple Silicon via MLX, Metal, and Accelerate.
  • No image, mask, or export ever leaves your device.
  • No account, sign-in, or user profile is required or created.
  • No analytics or telemetry is collected by Contour itself. This website keeps cookieless visitor statistics, described below.
  • The only network traffic originates from explicit actions you take — e.g. downloading a SAM model from Hugging Face, or checking for an app update.

What stays on your Mac

The following data is stored locally and never transmitted to us or any third party:

  • Your images and exports. Source photos, cached masks, and exported annotations remain on disk where you placed them.
  • Your collections and edits. Collection metadata, tune settings (confidence, NMS, alpha, minimum area), and per-image state are kept in the app's local support directory under ~/Library/Containers/io.mgcrea.Contour/.
  • Your preferences. Window state, theme, and other UI settings are stored in the app's standard user defaults.
  • Model files. SAM 3 and SAM 3.1 weights you download are cached on disk and re-used across sessions.

What we do not collect

  • No analytics, usage metrics, or behavioural telemetry.
  • No crash reports are sent to Contour. If you have enabled macOS's built-in Share Mac Analytics system-wide, Apple may collect diagnostics per your Apple privacy settings — that data is handled by Apple, not by us.
  • No advertising identifiers.
  • No account, email, or personal information.

Network access

Contour does make network requests, but only in response to actions you take:

  • Model downloads. When you choose to download a SAM model variant that is not already on your Mac, Contour fetches it from its hosted source (for example, Meta's model repository on Hugging Face). The request contains only what is required to retrieve the file and is not sent to Contour.
  • SAM license acceptance. On first download, Contour gates the request behind a one-time acceptance of Meta's SAM license. The acceptance is recorded locally; nothing is transmitted to us.
  • Update checks. The app may check for a new version by contacting an update feed we operate. The request is anonymous and contains only your current app version and the platform (macOS).

Contour will never upload your images, masks, exports, or collection contents.

Feedback form

The app collects nothing; this website has one page that does — the feedback form, and only when you choose to fill it in and press send. Contour itself never sends feedback: it opens a web address in your browser and stops. That is why the sections above still hold as written, and why this one is separate from them.

We receive what you typed — the subject and the details — and your email address if you chose to give one. The address is optional; leave it blank and the report is anonymous, and we will still read it.

Opening the form from inside the app (Help → Send Feedback) also fills in four technical facts: your Contour version, your macOS version, your Mac's model identifier (like Mac16,10), and your language. They arrive in the web address itself, so you can read them in your browser's address bar before anything is sent, and the form shows them as ordinary editable fields you can change or clear. Nothing is hidden. That is the entire list — never your username, your computer's name, and never an image, mask or dataset name.

Submissions are stored in a Cloudflare D1 database hosted in Western Europe and emailed to support@mgcrea.io so we can reply. We keep them for twelve months, then delete them. They are never used for marketing, never sold, and never shared. The form sets no cookie, and nothing in the code that handles your submission ever reads or stores your IP address. Like every page here it loads the site-wide visitor statistics described below, which are cookieless and do not identify you. To have a submission deleted sooner, email support@mgcrea.io.

Website analytics

This website uses Cloudflare Web Analytics to count visits, so we know which pages are read. It is part of the website only — it is not in Contour, and it never sees anything from the app.

It sets no cookie and stores nothing on your device. No identifier is kept between page loads, no localStorage, and no fingerprinting of your browser or IP address. A visit is counted by looking at whether the page you came from was on this site, not by recognising you. Because nothing is written to or read from your device, this needs no consent banner under the ePrivacy Directive (in France, Article 82 of the loi Informatique et Libertés), and there is none.

Sent on each page view: the page address, the address you came from, your browser and operating system, your screen size, and page load timings. Cloudflare derives an approximate country from your IP address and does not pass the address itself to us. We see aggregate totals only — never a profile, never an individual, and never anything across other websites.

Our lawful basis is legitimate interest in understanding how our own site is used. Cloudflare acts as our processor under its Data Processing Addendum. Any content blocker, or a browser Do Not Track setting, stops the script loading.

Third-party services

The Contour app does not integrate third-party analytics, advertising, or tracking SDKs. Model files may be hosted by third parties (for example, Hugging Face); those hosts will see the standard request metadata required to serve a file (IP address, user agent) per their own privacy policies.

Children's privacy

Contour is a general-audience professional tool and is not directed at children under 13. We do not knowingly collect personal information from children.

Your rights

Because Contour does not collect personal information, there is nothing for us to access, correct, or delete on your behalf. All app data lives in your user library and you can remove it at any time by deleting the app or its container directory.

Changes to this policy

We will update this page if the app's data handling changes in a material way. The "Last updated" date above reflects the most recent revision.

Contact

Questions about this policy can be sent to support@mgcrea.io.