Privacy

What stays on your Mac

All of it. Footman keeps its files in one folder, ~/Library/Application Support/Footman, and nothing in there leaves the machine unless you put it somewhere that syncs.

• Your settings, snippets and themes, as readable files.
• Your clipboard history, in a database only your account can read.
• What Footman has learned about which result you pick for which query.
• The workflows you have installed, exactly as you installed them.

Your clipboard

The clipboard database is the most sensitive thing Footman writes, and it is treated that way. It is readable only by you, it is never included in the folder you choose for syncing, and anything an application marks as a password is not recorded at all rather than recorded and hidden.

You can see how many clips are stored, delete all of them, and erase a removed clip for good, from this Mac and its backups, in Settings.

When Footman uses the network

By default, two things:

• Claiming your license, when you activate the key. Key validation is offline. A pending iCloud claim can be retried at launch.
• Checking for a new version, once a day: a request for a static file that carries the version you are on and nothing else. Right after it, Footman reads a public list of refunded license keys, as hashes, and takes your license off this Mac if yours is on it. That request carries nothing about you either. Switch it off under Settings, About.

Everything else is off until you turn it on:

• An AI provider, with your own key. The request goes to the provider you chose, not to us.
• Sync between your Macs, only after you choose it in Settings, Sync. Your settings, snippets, scripts, themes and workflows travel through a folder you choose, never your clipboard history, your license or your keys.
• GIF search. What you type after gif goes to Giphy, not to us.
• Currency rates. The European Central Bank’s daily rates, fetched from frankfurter.dev with nothing about you in the request.
• Your 1Password items, after you switch them on in Settings, Find. Footman asks your own 1Password app for item names when you type 1p, and for a password only when you copy one. Nothing goes to us.
• Sending a problem report. Report a Problem, in the menu bar, emails your report unless you switch sending on in that window. Sent, it carries what you write, Footman’s version, your macOS version, your Mac’s model (never its name), a random install id and Footman’s own log, with your searches, your clipboard and your window titles left out.
• Footman news. The Welcome window’s email line is sent to our site only when you press Sign Up.

Workflows

A workflow is somebody else's code, running as you. Footman does not run anything when you import one, shows you what a script will do before the first time it runs, and does not put your license key or any stored credential into the environment a workflow's scripts can see. What a workflow itself does with the network is between you and its author.

Payment

Purchases go through Paddle, which is the seller of record and handles the payment. We receive the fact that a license was bought and the email address the license was issued to. Card details never reach us.

Footman news by email

If you sign up for the newsletter, your address is the only thing kept. It is stored by Netlify Forms, it is used for Footman news, new features and the occasional discount, and it is never shared. Every newsletter email has an Unsubscribe link, and your mail app’s own Unsubscribe button works too; either one takes you off the list at once. Write to the address on the support page to have the address deleted altogether.

How the public website is used

Footman uses Microsoft Clarity to see how the public website is used: which pages people reach and where they stop. Typed text is hidden. Clarity is never on the checkout, license, activation, purchase confirmation or email confirmation pages. Clarity's privacy statement is at privacy.microsoft.com.

Getting in touch

Questions about any of this go to the address on the support page.