Privacy

What RafaBox keeps on your Mac

Your clipboard history, captures, recordings, palettes, templates and workflows are stored on your Mac. Saved clips are encrypted with AES-GCM, and the key is kept in your Mac’s Keychain. The search index stores keyed hashes, not your words.

To be exact about what isn’t encrypted: the name and bundle ID of the app you copied from are stored as plain metadata, so excluded apps and diagnostics keep working. Files you choose to export are ordinary files: a converted image or video you paste, copy, keep or show in Finder is saved, unencrypted, to Downloads > RafaBox, and a JSON export is readable by design. Conversions you don’t use are deleted from a temporary folder after a day.

Secret Shield keeps passwords and other secrets out of your history before anything is saved: copies marked as concealed by password managers, apps you exclude, private keys, supported API tokens, structured credentials and card numbers.

You can export everything as readable JSON, or erase all of it, at any time in RafaBox.

What leaves your Mac

The license check. This is the only network call RafaBox makes on its own. It sends your license key or the email address you sign in with, a salted hash of your Mac’s hardware ID, your Mac’s name, and the RafaBox and macOS versions. It never sends clipboard content, captures or files.

Sign-in codes. When you sign in with email, your address is used to send you a 6-digit code through an email delivery service. Codes are stored only as hashes and expire after 10 minutes.

Your trial. The trial is tied to the same salted hardware hash, so it can’t be restarted by reinstalling. No name or email is needed for it.

Things you choose to send. Saving a file, using macOS Share or dragging a capture into another app sends it where you send it, and nowhere else. Rewrite with Siri uses Apple Intelligence on your Mac.

Buying RafaBox

Payments are handled by the payment provider named on the checkout page. They receive what you enter at checkout, such as your email address and card, under their own privacy policy. We receive your email address and the state of your purchase, so we can send your license and keep it active. We never see your full card number.

When you click a buy button, the checkout link carries which button it was and, if you arrived from a campaign link, that campaign. That tells us which pages lead to purchases. It isn’t linked to your visits on this site.

This website

This site sets no cookies and stores nothing in your browser. It loads no third-party scripts, fonts or trackers: everything it shows comes from this site. It’s hosted on Cloudflare Pages, which, like any web host, handles your IP address and browser details to deliver the pages and protect against abuse.

Anonymous visit counting. To learn which pages help people, the site counts page visits and a short list of clicks: the main buttons (download, buy, manage subscription, email us), which parts of the home page you scrolled to, which questions you opened, and which demo steps or tools you tried. With each one it records the page, roughly where you are (country), the kind of device and browser, and the campaign link you arrived from, if any. It uses PostHog, hosted in the EU, in cookieless mode, through this site’s own address. No cookie or ID is stored on your device, you’re never identified, and visits aren’t linked from one day to the next. Nothing you type is recorded, there are no screen recordings, and web addresses are trimmed to the page itself.

If your browser sends Global Privacy Control or Do Not Track, none of this runs.

How long we keep things

We keep license and purchase records for as long as your license exists, and as long as tax and accounting rules require after that. Everything on your Mac stays until you delete it or erase it in RafaBox.

Your choices

• Erase your history in RafaBox at any time.
• Choose Sign out of this Mac in Settings > License to free the license and stop the check on that Mac.
• Email us to see or delete the license records we hold about you.

Contact

Questions about privacy: hello@rafabox.app.