Privacy policy

Last updated 28 October 2026

waffle-o-matic is made by mlon LLC. This policy covers the waffle-o-matic app and this website, waffle-o-matic.com.

The app

• Your bakes, your picks and your settings stay on your phone. The app does not send them anywhere.
• The app collects no analytics, shows no ads, and does not track you across other apps or websites.
• To show a waffle on your table, the app uses the camera. The picture stays on your phone. A photo goes to your photo library only when you tap the shutter.
• Apple sells the Bonus Pack through the App Store. Apple handles the payment, and we never see your payment details. The app asks Apple which items you own.

Sharing a waffle

• When you tap Share, and only then, the app sends the waffle's 3D model and a picture of it to our share service on waffle-o-matic.com.
• Anyone with the link can see the waffle. Links are not listed or searchable anywhere.
• To keep the service from being misused, the app proves it is a genuine copy on an Apple device, with Apple's App Attest. The app makes a key on your phone for this. We keep the key's public half, Apple's receipt for it, and which waffles it shared. None of this names you or your Apple Account.
• We limit how often a network address or a key can share. We count requests for a minute and do not keep the addresses.
• A shared waffle keeps for 30 days. A day later we delete its files. We keep a short record of the share, its id and its dates, so its link can say it went stale.
• To remove a shared waffle sooner, or to report one, write to abuse@waffle-o-matic.com with its link.

This website

• We count visits with Cloudflare Web Analytics. It records the page, the page you came from, your browser and device type, and your country. It sets no cookies and does not follow you across websites.
• Cloudflare hosts the site and the share service. Like any web host, it handles your network address to deliver pages and to protect them from attacks. Our request logs keep for a few days.
• The site sets no cookies, and its fonts come from this domain, not from a font service.

Who else handles data

• Cloudflare hosts the website, the share service and the shared waffles, and runs the visit counts. Read Cloudflare's privacy policy.
• Apple runs App Attest and the App Store. Read Apple's privacy policy.

We do not sell or rent any data, and we share it with no one else.

Children

waffle-o-matic is for everyone. We do not knowingly collect personal information from anyone, children included. A shared waffle carries no name, no contact and no location.

Changes and contact

When this policy changes, we update it here and change the date at the top. Questions go to abuse@waffle-o-matic.com.