Privacy Policy
BlindPass is a native Mac app made by Joe LeBoube. It keeps API keys, .env
variables and recovery codes out of your files. This policy explains what BlindPass does and
does not do with your information. The short version: BlindPass has no account, no
server and no sync. Your data stays on your Mac, and the developer can't see it.
What BlindPass stores, and where
Everything you save in BlindPass lives in a single encrypted file on your own Mac. The key that opens it is protected by your Mac's Secure Enclave and unlocked with Touch ID. Nothing you store is sent to the developer or to any third party. There is no BlindPass account to create and no BlindPass server to sign in to.
Information we collect
None. BlindPass does not collect, transmit, sell or share your personal information, and it contains no analytics, advertising or tracking.
Network activity
BlindPass only goes online for these things, and only as described:
- Update check (optional, on by default). About once a day BlindPass asks GitHub's public API whether a newer release exists. This is an ordinary web request; it does not include any information about you or your vault. You can turn it off in Settings.
- Website icons (optional, off by default). If you turn this on, BlindPass fetches the icon for a website you've saved by asking that website directly over HTTPS. No third-party icon service is used, and no cookies are sent.
- Send to Host (only when you start it). When you choose to send variables to a hosting provider (such as Vercel, Netlify, Cloudflare or Fly.io), BlindPass uses that provider's own command-line tool, signed in as you, after a preview and Touch ID.
AI coding tools
When you connect an AI coding assistant, BlindPass exposes the names of your secrets, never their values. Values are injected only into commands you approve with Touch ID and stay out of the model.
This website
The BlindPass website (blindpass.leboube.ai) uses Fathom Analytics, a privacy-friendly service that measures aggregate, anonymous traffic. It does not use cookies and does not collect personal data. If you use the "Ask" box, the question you type is sent to our own serverless function to answer from this site's published content; it isn't linked to your identity or stored for advertising.
Children
BlindPass is a developer tool and is not directed at children under 13.
Changes
If this policy changes, the updated version will be posted on this page with a new date.
Contact
Questions about privacy? Email blindpass@leboube.ai.