Security

The Mac app

Vendor keys live in your Mac’s login Keychain, with iCloud synchronization disabled, and never go to QuotaCanary servers. The app reads balances directly from vendors using their keys.

If you opt in to update checks, the app sends its app version, macOS version and chip to the signed update feed.

The Mac app has no analytics. Checks and alerts require the app running and your Mac awake and online. Local storage does not protect against someone controlling your unlocked Mac.

Local data and deletion

Connection settings and balance history live in the app’s local storage. Remove a connection to remove its stored key and history, or use Erase local data to remove all app-owned credentials and local files. Uninstalling alone does not erase that data.

Self-hosting

Not on a Mac? Run the web version yourself. You operate its server and database, and its server can decrypt the vendor keys it stores. Encryption at rest does not protect against someone with both the database and the server secrets. Read the self-host guide.

Limit access

Use read-only or narrowly scoped credentials where a vendor supports them. Some adapters put credentials in URL parameters, which may appear in vendor or proxy logs even over HTTPS.

Reporting a vulnerability

Email [email protected] before posting a security report publicly.