Privacy Notice
The short version
HardenMac doesn't require an account, doesn't sell your data, and doesn't ask for anything beyond what's described below. The free tools run entirely on your own device. We receive an email address only if you choose to email us.
No accounts
There is no HardenMac login, no user account, and no profile. Nothing you do on the site is tied to an identity unless you voluntarily email us.
The free tools run entirely in your browser
The Mac Exposure Check computes everything on your own device, in your browser. It makes no network requests of any kind while you use it — no fetch, no XMLHttpRequest, no beacons, no analytics pings tied to your answers. This is enforced by an automated test suite that traps every network and storage API and fails the build if any of them is touched during a full run through the tool.
- Your answers and results are held only in your browser tab's session memory while you're using it, and are cleared when you close the tab. They are never written to a cookie or persistent storage, and never leave your device.
- No question asks you to type in a password, secret, or account name — it's fixed multiple-choice throughout.
- The “Build my private Exposure Map” option also works without transmitting your individual answers to us.
What we actually collect, and from where
Site analytics: none. hardenmac.com loads no analytics script, no beacon, no tracking pixel, and sets no cookies. We deliberately don't measure visitors at all.
If you email us. If you email [email protected] (including via any mailto: link on the site), we receive whatever you choose to send — your email address and message content — the same as any email. We use it to respond to you and nothing else.
Hosting (Cloudflare). The site is served by Cloudflare. Like any web host, Cloudflare's infrastructure processes standard server-level logs (IP address, timestamp, requested URL, user agent) as part of normal delivery, security, and abuse-prevention operations. We don't separately collect or analyze this beyond what Cloudflare's platform provides.
Payment (at checkout). If you purchase the paid Protocol, your payment is handled by Gumroad, which acts as merchant of record. We don't see or store your card details; Gumroad handles your buyer information under its own privacy policy, which we encourage you to read before purchasing. We receive the buyer name and email Gumroad passes to sellers, used only for support and refunds.
What we don't do
- We don't sell your data, to anyone, ever.
- We don't run ad-tracking pixels, retargeting scripts, or cross-site tracking of any kind.
- We don't require an account or build a profile of who you are.
- We don't have access to, and never receive, your individual answers in the free tools.
Your choices
You can use everything free on this site without giving us anything at all — no email, no signup. If you've given us your email (by writing to us or purchasing) and want it deleted, email [email protected] and we'll remove what we hold.
Changes to this notice
We may update this notice if what the site collects changes. Material changes will be reflected by an updated “Last updated” date.