Privacy Policy

Abruf does not collect your data. It has no accounts, collects no analytics, and nothing you send passes through a server of ours.

Effective October 24, 2026

Who this is from

Abruf is a Mac app made by Mario Jackson. In this policy “we” means the developer, and “Abruf” means the app. For anything about privacy, write to support@abruf.app.

What Abruf sends, and where

Abruf sends request data only to the servers and brokers you choose. Nothing passes through a server run by Abruf, and Abruf collects no analytics. In detail:

• Your HTTP requests and MQTT connections go to the addresses you enter. HTTP requests go through a proxy only if you set one up in Settings.
• Each request carries the header User-Agent: Abruf/1.0 unless you set your own. It tells the server you are calling which app made the request.
• When a request signs in with OAuth 2.0, Abruf opens the sign-in page you configured and exchanges tokens with that provider.
• A request signed with AWS Signature is signed on your Mac and goes only to the host in its URL. Your secret access key is never sent.
• When a request or an MQTT connection signs in with an AWS profile, Abruf reads the AWS configuration folder you grant it access to and also contacts Amazon Web Services (amazonaws.com) itself: IAM Identity Center to exchange and renew the sign-in the AWS CLI made, the Security Token Service (STS) to assume a role the profile names, and AWS IoT when you ask it to find your endpoint. Those calls carry your AWS credentials and none of your request data. Credentials read from that folder are kept in memory. A sign-in that Abruf renews is written back to the AWS CLI’s own cache in that folder and nowhere else, so the CLI stays signed in too.
• The example request Abruf offers when you first open it asks this website for a small file of sample data, at abruf.app/example/stations.json. Nothing is sent unless you press Send, and the website treats it like any other visit, as described below.

Where your data is kept

Workspaces are saved in iCloud Drive or a folder on your Mac. They go to iCloud Drive when it is on, unless you choose your Mac, in Settings or as you create one. In iCloud Drive they are stored by Apple under your Apple Account, where Apple’s privacy policy applies. We cannot see them.

Passwords, tokens and keys in auth fields, and variables you mark as secret, are kept in your Keychain, which macOS encrypts, rather than in the workspace. So are the values of headers, parameters, form fields and prepared variables whose names mark them as credentials, such as Authorization, X-Auth-Token or api_key. They sync through iCloud Keychain when you have it turned on. Everything else, including the rest of a URL, request bodies and values under other names, is saved with the workspace as written.

Response history stays on your Mac, together with your settings and any cookies set by the servers you call. Before a sent request is kept with its response, Abruf masks the secrets above wherever they were sent, and any value under a name that marks a credential. Responses are kept as they arrived.

Abruf tells macOS the name and location of the workspace you have open, so that Spotlight and Handoff can offer it on your own devices if you use them.

AI features

AI features use Apple’s on-device model. The requests and responses you ask about never leave your Mac, and known secrets are masked first. Nothing is generated until you ask for it.

Purchases

Apple handles purchases and access checks through StoreKit. Abruf has no accounts and never sees payment details. Whether a trial or purchase is active is checked on your Mac and is not reported to us.

Apple gives every developer sales totals for their apps. If you have chosen in macOS to share analytics with app developers, Apple also gives us crash reports and usage statistics that do not identify you.

Notifications

Notifications from MQTT watches are created on your Mac while a connection is open. Abruf does not use push notifications.

This website

abruf.app sets no cookies, runs no scripts and loads nothing from other sites. It is hosted by Cloudflare, which, like any host, processes your IP address and basic details of each request in order to deliver the pages and keep the service secure. Cloudflare’s privacy policy describes how.

When you write to us

If you email support@abruf.app, we receive your address and whatever you include, and use them only to answer you. Ask at any time and we will delete the correspondence.

Your rights

We hold no personal data about you beyond any email you have sent us. You can ask for a copy of that correspondence, or for its deletion, at the address above. If you live in the European Economic Area, the United Kingdom or Switzerland, you also have the right to complain to your data protection authority.

Children

Abruf is a tool for developers and is not directed at children. It does not knowingly collect personal information from anyone.

Changes

If this policy changes, the new version will be published on this page with a new effective date.