Privacy Policy for Sanitizr

Effective Date: July 31, 2026

Sanitizr ("the Application") is a desktop utility developed by engawa-dev.

Summary

Sanitizr processes your documents locally on your device. The contents of the files you process, the values that are masked, and your un-mask key files are not sent to us or stored on any server operated by us. There is no telemetry and no analytics.

If you use the optional Pro upgrade, Apple StoreKit is used only to load product information, complete or restore a purchase, and check entitlement status. StoreKit requests do not include the contents of your documents.

How the Application Works

Sanitizr masks sensitive information — such as email addresses, phone numbers, payment card numbers, IP addresses, URLs, and any custom words you specify — in documents that you choose. Document processing is performed locally:

Information We Collect

We do not receive or have access to your files, masked values, un-mask key files, custom words, or document-processing activity.

To enforce the Free edition’s daily limit, Sanitizr stores only the current local date and daily run count in the app’s local preferences on your Mac. This counter is not transmitted to us or any third party.

Pro Purchases

The Mac App Store edition offers a non-consumable Pro upgrade through Apple StoreKit. Apple processes product information, purchases, receipts, restoration, refunds, and entitlement checks. Sanitizr does not send your documents, masked values, restoration keys, or custom word lists as part of StoreKit communication.

StoreKit and App Store transactions are subject to Apple’s Privacy Policy. We do not receive your payment card details.

Encrypted Pro History

Pro can save up to 50 custom-word sets on the Mac. This encrypted history contains the custom words, categories, generated replacement labels, record identifiers, and created and last-used timestamps needed to display and reuse saved sets. It never contains document bodies, file names, output files, or restoration keys. History is encrypted with AES-GCM in the app container using a dedicated key stored in the macOS Keychain with synchronization disabled. Users can delete the encrypted history and its key from Sanitizr Settings.

Children’s Privacy

The Application is not directed to children and does not knowingly collect any information from anyone.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: Sanitizr support on GitHub. Do not include private documents, masked values, custom words, or restoration keys in a support request.