Privacy policy

Tokens you paste or open, and any keys you use, are processed entirely on your Mac. Saved keys (Tessera Pro) are stored in your macOS Keychain on this device only, optionally protected by Touch ID. Token history is encrypted on your Mac and you can clear it at any time in Settings.

Tessera reads the clipboard only on your Mac: when you paste, and, if you turn on clipboard watch (Tessera Pro, off by default), to notice tokens as you copy them. Clipboard watch only looks at plain text. Nothing read from the clipboard leaves your Mac.

Tessera connects to the internet only when you ask it to fetch an issuer's public keys (Fetch keys from issuer). It then contacts that issuer directly over HTTPS, using OpenID Connect discovery and the issuer's JWKS. The request goes from your Mac to the issuer; I don't receive or see it. Nothing else is sent anywhere. (The direct-download version also makes the checks described below.)

Tessera Pro is bought through the Mac App Store. Apple handles the transaction under Apple's privacy policy (opens in a new tab), and I don't receive your payment details.

You can also buy Tessera Pro on this website instead of the Mac App Store. This section covers that version. Everything above still applies: tokens, keys and the clipboard stay on your Mac.

Purchases are processed by Stripe (opens in a new tab), which sells Tessera Pro as the merchant of record. I don't receive your payment details. I store your email address and a random license ID, so I can deliver your license, send it again if you lose it, and deactivate it if the payment is refunded or disputed.

License emails are sent with Resend (opens in a new tab).

About once a week, the app downloads a public list of deactivated licenses from conorgriffin.com. The request carries no license, email address or other identifier, only the app version. Tessera also uses Sparkle to check conorgriffin.com for new versions, without sending a system profile. This website is hosted on Vercel, which, like any web host, may process request details such as your IP address. The website (not the app) uses Vercel Web Analytics to count page views and see which sites send visitors here. It uses no cookies and doesn't identify you or follow you across sites. Clicks on Download and Buy Pro are also counted per day, as plain totals with nothing about you attached.

If this policy changes, the updated version will be posted on this page with a new date.

Questions about privacy: conorgriffin@gmail.com