HarSafe Privacy Policy

Overview

HarSafe reviews one HAR file on your Mac for common credentials in supported request and response headers, URL query parameters, and request bodies. You choose which findings to redact and where to save a new copy.

Files and on-device processing

HarSafe opens only a HAR file that you select. Parsing, matching, review, and redaction happen locally on this Mac. The original file is not overwritten.

Unsupported binary, base64, arbitrary text, and response-body content may not be inspected. The app identifies some unsupported content with a warning; a result with no common matches does not prove the file contains no sensitive information.

Information collected by KernelBeam

HarSafe does not collect, upload, or track HAR contents or findings. It has no KernelBeam account, advertising, analytics, or third-party tracking. Unmasked values are not written to logs, app preferences, or analytics records.

The export allowance and purchase entitlement state are kept in the app container on this Mac and are not sent to KernelBeam.

Purchases and Apple services

One-time in-app purchases, product information, transaction verification, entitlement checks, and Restore Purchases are handled through Apple StoreKit. The app receives the product and verified entitlement information needed to provide the purchased features. KernelBeam does not receive payment-card details. Apple may process transaction, device, diagnostic, and App Store information under Apple’s privacy terms and your Apple Account settings.

Network access

File processing does not require a KernelBeam service. This app does not connect to a KernelBeam or analytics service and does not send files, entries, or file names over the internet. Its network activity is limited to Apple App Store services through StoreKit for purchase information, transactions, entitlement checks, and restoration. Purchases and restoration require an internet connection; local work remains available when Apple services are unavailable.

Retention, exports and deletion

The parsed HAR is held for the active session. The source path and parsed content are released when the session closes. A redacted copy remains wherever you choose to save it.

If you choose a cloud-synced destination or later share the copy, that provider or recipient handles the file under its own terms.

Contact

HAR files can contain credentials and personal form data. Please do not attach an original HAR or unmasked secret to a support email. A support email contains the address and information you choose to send.

Privacy questions: support@kernelbeam.com.