This page. Fonts and images come from this site. Visits are counted with Plausible: no cookies, no personal data, your IP isn't stored. The star count and download links are read from GitHub's public API when the page loads, so GitHub sees that request.
The download form. When you click "Get the download", the form is loaded from Tally. It asks for your email and your computer, only to send you new versions. Ask through a GitHub issue to be removed, or reply to any email.
The app. Your cap table and documents stay in your folder. Documents you send for signature pass through the signing relay until everyone has signed, then the relay deletes them (within 7 days, or 30 if never signed). The app sends an anonymous install ping (a random install id, the app version, your operating system, and yes/no for "imported", "has documents", "sent for signature") once on first run and then weekly, only after you accept the terms. The relay keeps the day, not the time or your IP address. Turn it off in Settings → Privacy. The code that sends and stores it is public in the repo.