Privacy Policy

Last updated: November 7, 2026

Controller

Erik Nascimento, private individual, Portugal. Contact: suporte@safe8bit.com.

The app: your secrets don't leave your Mac

• The vault is encrypted on your Mac (Argon2id and AES-256). We have no access whatsoever to it, to your master password or to your secrets.
• There is no account, no telemetry and no usage statistics.
• Updates: once a day, the app downloads safe8bit.com/appcast.xml to check whether there is a new version. It is the only request it makes to our website, and it carries nothing from the vault or from your Mac. As with any visit to the website, Netlify logs the IP address and the app version. You can turn this check off in Settings › Lock › Updates.
• If you turn on sync, the vault, already encrypted, is stored in your own iCloud, under Apple's terms.
• The Pro license key is verified on the Mac itself, without an internet connection.
• Some terminal commands talk to services you choose, and only when you run them: safe8bit test asks the service itself (for example Stripe or OpenAI) whether a key works, and safe8bit push sends variables to Vercel. Those requests go directly from your Mac to that service, never to us.

The website

The website is hosted on Netlify, which logs technical data about requests (such as IP address and browser) for operation and security. Our pages use no cookies and no analytics tools. The /en/buy page loads the Paddle checkout, which may use its own cookies to process the payment and prevent fraud.

Downloading the app

The app file is hosted on GitHub, in a public repository; the Download button, Homebrew and the app itself, when you install an update, fetch it from there. GitHub logs technical data about the request, such as the IP address, under its own privacy policy. If you install through Homebrew, Homebrew may collect anonymous installation statistics, which you can turn off with brew analytics off. We do not receive this data.

Purchases and licenses

Payment is processed by Paddle, the Merchant of Record, which handles payment data under its privacy policy. We do not receive your card details. From Paddle we receive your email, your country and the purchase and subscription identifiers, and we use them only to:

• issue and send the license key (which includes your email) with each payment;
• provide support and comply with legal obligations.

The license email is sent through Resend (EU region), which acts as a processor. Legal basis: performance of the contract you enter into with us when you buy Pro.

Support

If you write to us, we use your email and the content of your message only to reply to you. Emails sent to suporte@safe8bit.com are received by Resend and forwarded to the mailbox of the person who replies.

Retention

We keep purchase data while the subscription is active and, after that, for as long as the law requires. Support emails are deleted once they are no longer needed.

Transfers

The providers above (Netlify, GitHub, Paddle, Resend) may process data outside the European Union, with the safeguards required by the GDPR, such as standard contractual clauses.

Your rights

You can request access to, rectification, erasure, restriction of processing and portability of your data, and object to its processing, by writing to suporte@safe8bit.com. You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (cnpd.pt).