CaskyPrivacy Policy
Effective November 5, 2026
This policy explains how the Casky app for macOS ("Casky", "the app") and the website casky.app ("the website") handle information. Casky is developed by avrdude ("we", "us"), who is responsible for the processing described here.
Summary
Casky has no accounts or advertising. To see how the app is used and what goes wrong, it sends anonymous usage data, which you can turn off. Your setups, kits, history and settings stay on your Mac.
Data on your Mac
Your setups, kits, history and settings are saved on your Mac, or in your iCloud Drive if you turn on sync, and are never sent to us. If you choose to save the password used to approve installs, it is kept in your login keychain and never leaves your Mac. You can delete all of this by deleting the app's files in ~/Library and the keychain item in Keychain Access.
Usage data
Casky sends anonymous usage data to PostHog, which stores it for us on servers in the European Union. It's tied to a random ID created on your Mac when Casky first runs. That ID isn't linked to your name, email, Apple Account or your Mac's hardware.
What's sent:
- Which pages you open, and how far you get in the setup assistant.
- That you searched and how many results there were, not what you searched for.
- Installs, updates, uninstalls and setups you run: how many steps, how many failed or were skipped, how long it took, and the names of public Homebrew and App Store packages involved. Packages from taps you added are never named.
- Which kind of step failed, such as an install or an editor extension.
- That you saved, imported or exported a setup or created a kit, how many items it had and the export format, not its name or contents.
- Which of Casky's settings you switch on or off, and how much space Clean Up freed.
- When Casky opens, closes, is installed or updated.
- With every event: Casky's version, your macOS version, Mac model (such as "MacBook Pro"), screen size, language, time zone, whether you're on Wi-Fi, and a session ID that groups the events from one use of the app.
Never sent: your name or email, what you type in search, setup or kit names, file names or contents, dotfiles, passwords, or the names of packages from taps you added.
PostHog uses your IP address to estimate your approximate location (country, region and city) when an event arrives, then discards the IP address. We use this data only to improve Casky, on the basis of our legitimate interest in knowing which features are used and which fail. It's kept for up to one year. PostHog handles it under the PostHog Privacy Policy.
To stop sending usage data, turn off Settings › General › Share anonymous usage data. Casky stops sending it right away. The casky command never sends it.
Third-party services
To list, install and update software, Casky connects from your Mac directly to the services below. These requests go to the service, not to us. Each service receives your IP address and the details of the request (for example a package name or a search term) and handles them under its own privacy policy.
- Homebrew (formulae.brew.sh) and GitHub, for Homebrew packages, taps and project icons.
- Apple, for App Store app information, and the App Store itself when you install App Store apps.
- Visual Studio Marketplace and Open VSX, for editor extensions.
- npm, PyPI and crates.io, for npm, pipx, uv and Cargo packages.
- Any Git repository you add for dotfiles.
Software you install through Casky comes from its own developers and may collect information under its own terms.
Website and downloads
The website and the downloads at dl.casky.app are served by Cloudflare, which processes IP addresses and request information to deliver and protect them, under the Cloudflare Privacy Policy.
The website sends usage data to the same PostHog project as the app: which pages you view and for how long, clicks on the download button, the page that linked you to the website, your browser, operating system, device type, screen and window size, language and time zone. It sets no cookies and stores nothing in your browser, so nothing connects one visit to the next or to the app. PostHog uses your IP address to estimate your approximate location (country, region and city), then discards it. Browser settings or extensions that block trackers stop it.
If you email us, we use your email address and message only to reply, and keep them only as long as needed for that.
Children
Casky is not directed to children under 13, and we do not knowingly collect information from them.
Your rights
Depending on where you live, including under the GDPR, you may have the right to access, correct or delete personal data about you, to object to or restrict its processing, and to complain to a data protection authority. Usage data isn't linked to you, so we usually can't tell which events are yours; if you send us the usage data ID shown in Settings › General, we can find and delete them, and turning usage data off stops new ones. To make a request, contact us at the address below.
Changes
We may update this policy. Changes are posted on this page with a new effective date.