AuthWisp Privacy Policy

Effective: 2026-09-22 · Contact: fulsker@gmail.com

AuthWisp is a local-only macOS app. There is no AuthWisp server, no analytics SDK, no advertising, and no sale of personal data.

What the app accesses

Gmail (Google OAuth, read-only scope gmail.readonly + openid email): lists recent message IDs and fetches full content of only the newest messages inside your chosen freshness window to detect login codes and magic links. Queries exclude spam/trash.
Outlook (Microsoft Graph, delegated Mail.Read + openid profile email offline_access): same pattern — recent messages only, inside the freshness window.
iCloud / IMAP (app-specific password): connects to the host you enter (e.g. imap.mail.me.com:993) over TLS and reads only recent inbox headers and bodies for the same detection.

OAuth access/refresh tokens and IMAP app passwords: macOS Keychain only (services dev.fls.authwisp.gmail, dev.fls.authwisp.imap, and future dev.fls.authwisp.outlook).
Account metadata and preferences: ~/Library/Application Support/AuthWisp/.
Message bodies, codes, and links are never logged, never synced to iCloud, and never sent to any AuthWisp endpoint (none exists).
Clipboard copies clear after a configurable TTL only if unchanged.

Nothing. Google and Microsoft OAuth endpoints receive only the standard OAuth flow traffic from your device. No third-party processors.

Remove an account in the AuthWisp window to delete its Keychain token/secret and local metadata.
Revoke access anytime at myaccount.google.com/permissions and mysignins.microsoft.com.
Discard action suppresses a bad candidate for 15 minutes.

Candidates expire with the freshness window (default minutes). Dismissal hashes expire after 15 minutes. No backups leave the device.

Questions: fulsker@gmail.com. Replace this placeholder and host at https://authwisp.panic.run/privacy before verification.