OBSCURA

Privacy Policy

Last updated 23 May 2026

Obscura collects nothing about you. Everything you put in Obscura stays on your Mac, encrypted, where only you can read it. There is no cloud, no telemetry, no account.

What Obscura is

Obscura is a macOS application that encrypts files locally on your Mac. It is sold once as a standalone product. It has no server backend operated by us.

What we collect

Nothing.

We do not run analytics, telemetry, or crash reporting that contacts our servers. We have no servers. We do not collect your email beyond what App Store Connect gives us as part of the purchase (Apple handles the purchase; we receive an anonymised sales report from Apple).

Where your data lives

All vault content — files, thumbnails, metadata, collections, tags — is encrypted with AES-256-GCM under a key derived from your password and stored locally on your Mac, inside the app's sandboxed container at:

~/Library/Containers/com.fabiancooper.obscura/

Nothing in that directory is ever sent off your Mac by Obscura.

Cloud import

Obscura can import files from cloud providers you connect (iCloud Drive, Dropbox, Google Drive, OneDrive). When you do this:

You authenticate with the provider directly. The provider's OAuth screen runs in your system browser; Obscura never sees your username or password for those services.
Files are downloaded over an encrypted connection to the provider's servers, sealed under your Obscura key, and stored in the local vault container. The original copy on the cloud provider is not touched by Obscura.
The cloud provider's own privacy policy applies to your data sitting on their servers. Read theirs separately.

Touch ID and Keychain

If you enable Touch ID, your unlock secret is stored in the macOS Keychain, protected by the Secure Enclave on your Mac. The Keychain entry is scoped to Obscura via the keychain-access-groups entitlement (8H992GT3D6.com.fabiancooper.obscura) — no other app on your Mac can read it.

Recovery phrase

Obscura optionally generates a 24-word BIP39 recovery phrase. The phrase is shown to you once during setup, then never stored anywhere by the app. If you lose both your password and the phrase, the vault cannot be recovered. That is the design — even we cannot recover it.

Children

Obscura is not directed at children under 13 and does not knowingly collect any data from anyone, including children.

Changes to this policy

If this policy changes materially, an updated version will appear at the same URL with a new "Last updated" date. Substantive changes (new data collection, new third parties) would also be announced in the app's release notes.

Contact

Questions or concerns: write to fabco921@gmail.com.

For App Store-related issues (refunds, billing), contact Apple Support — they handle all purchases.