Privacy Policy
The short version: the app keeps your traffic on your Mac and sends nothing about you anywhere. The website collects what you type into the sign-up form, and the services that host it see your IP address.
Who we are
elcapture is made by an independent developer. Write to hello@elcapture.com about anything in this policy, including requests to see or delete your data.
The app
- Captured traffic stays on your Mac. Requests, responses, rules, settings, history and the JSON tool's documents are stored in
~/Library/Application Support/elcapture. History can be encrypted with a key kept in your Keychain. None of it is uploaded. - Captured traffic can be sensitive. Requests and responses often contain passwords, tokens, cookies and personal data, and history keeps them on disk. Turn on Encrypt history files (Session → History), use Incognito to keep nothing on disk, or delete history when you're done.
- The certificate is yours. elcapture creates its own root certificate on your Mac the first time it runs. Its private key never leaves your Mac.
- Update check. At launch, hourly and when you come back to the app, it fetches
elcapture.com/latest.json; when you install an update it downloads the new version from elcapture.com. These requests carry your IP address and a generic "elcapture-updater" label, and no account, device ID, version or usage data. You can turn the check off in elcapture → About elcapture. - No analytics, telemetry or crash reports. The app doesn't collect them.
- Things you choose to send. "Publish to GitHub Gist" uploads the requests you're looking at (with credentials removed) to your own GitHub account through the GitHub CLI. Requests you send from the API client go where you point them. Links to elcapture.com and GitHub open in your browser.
- Local control API. The app listens on your Mac only (127.0.0.1) for scripts, the command-line tool and AI assistants you connect, and requires a token stored on your Mac.
The website
- Hosting. elcapture.com is served by Cloudflare, which processes your IP address and request details to deliver and protect the site. We don't run analytics or advertising trackers, and fonts are served from elcapture.com, not a third party.
- The sign-up and feedback form is provided by Tally. It collects what you enter, such as your email address and answers about what you debug. We use it only to reply, send you beta builds and ask for feedback. No newsletters, and we don't sell or share it.
- Email. Messages to hello@elcapture.com are forwarded by Cloudflare Email Routing to a Gmail inbox.
- GitHub. If you open an issue or discussion at github.com/elcapture, GitHub's privacy policy applies to it.
How long we keep it
Form answers and emails are kept while the beta runs and for up to 12 months after, unless you ask us to delete them sooner. Data in the app stays until you delete it; History has its own retention setting.
Your rights
You can ask to see, correct or delete the personal data we hold about you, or object to how we use it, by writing to hello@elcapture.com. If you're in the EU, UK or another place with data-protection law, you can also complain to your local supervisory authority.
Paid plans
When paid plans launch, payments will be handled by a reseller that acts as merchant of record and processes billing details under its own privacy policy. We'll update this page, and the app will say what a license check sends, before that happens.
Changes
We'll post changes here and update the date at the top. A change that sends more data from the app will be announced in the app's release notes first.