CaskyPrivacy Policy
Effective October 24, 2026
This policy explains how the Casky app for macOS ("Casky", "the app") and the website casky.app ("the website") handle information. Casky is developed by avrdude ("we", "us"), who is responsible for the processing described here.
Summary
Casky has no accounts or advertising. To see how the app is used and what goes wrong, it sends anonymous usage data, which you can turn off. Your setups, kits, history and settings stay on your Mac.
Data on your Mac
Your setups, kits, history and settings are saved on your Mac, or in your iCloud Drive if you turn on sync, and are never sent to us. If you choose to save the password used to approve installs, it is kept in your login keychain and never leaves your Mac. You can delete all of this by deleting the app's files in ~/Library and the keychain item in Keychain Access.
Usage data
Casky sends anonymous usage data to PostHog, which stores it for us on servers in the European Union. It's tied to a random ID created on your Mac when Casky first runs. That ID isn't linked to your name, email, Apple Account or your Mac's hardware.
What's sent:
- Which pages you open, and how far you get in the setup assistant.
- That you searched and how many results there were, not what you searched for.
- Installs, updates, uninstalls and setups you run: how many steps, how many failed or were skipped, how long it took, and the names of public Homebrew and App Store packages involved. Packages from taps you added are never named.
- Which kind of step failed, such as an install or an editor extension.
- That you saved, imported or exported a setup or created a kit, how many items it had and the export format, not its name or contents.
- Which of Casky's settings you switch on or off, and how much space Clean Up freed.
- When Casky opens, closes, is installed or updated, its version, your macOS version and Mac model, language and time zone.
Never sent: your name or email, what you type in search, setup or kit names, file names or contents, dotfiles, passwords, or the names of packages from taps you added.
PostHog uses your IP address to estimate your country and city when an event arrives, then discards it. We use this data only to improve Casky, on the basis of our legitimate interest in knowing which features are used and which fail. It's kept for up to one year. PostHog handles it under the PostHog Privacy Policy.
To stop sending usage data, turn off Settings › General › Share anonymous usage data. Casky stops sending it right away. The casky command never sends it.
Third-party services
To list, install and update software, Casky connects from your Mac directly to the services below. These requests go to the service, not to us. Each service receives your IP address and the details of the request (for example a package name or a search term) and handles them under its own privacy policy.
- Homebrew (formulae.brew.sh) and GitHub, for Homebrew packages, taps and project icons.
- Apple, for App Store app information, and the App Store itself when you install App Store apps.
- Visual Studio Marketplace and Open VSX, for editor extensions.
- npm, PyPI and crates.io, for npm, pipx, uv and Cargo packages.
- Any Git repository you add for dotfiles.
Software you install through Casky comes from its own developers and may collect information under its own terms.
Website and downloads
The website and the downloads at dl.casky.app are served by Cloudflare, which processes IP addresses and request information to deliver and protect them, under the Cloudflare Privacy Policy.
The website counts page views, the time spent on a page and clicks on the download button, using the same PostHog project as the app. It sets no cookies and stores nothing in your browser, so nothing connects one visit to the next or to the app. PostHog discards your IP address after estimating your country.
If you email us, we use your email address and message only to reply, and keep them only as long as needed for that.
Children
Casky is not directed to children under 13, and we do not knowingly collect information from them.
Your rights
Depending on where you live, including under the GDPR, you may have the right to access, correct or delete personal data about you, to object to or restrict its processing, and to complain to a data protection authority. Usage data isn't linked to you, so we usually can't tell which events are yours; if you send us the ID from Settings, or simply turn usage data off, we can act on your request. To make a request, contact us at the address below.
Changes
We may update this policy. Changes are posted on this page with a new effective date.