Last updated: February 11, 2026
Decoy is a local-only application. It runs entirely on your Mac and does not communicate with any external servers operated by us. Your data never leaves your device.
Decoy does not collect, transmit, or store any personal information on remote servers. We have no analytics, no tracking, no telemetry, and no crash reporting infrastructure. We do not know who you are, what you use Decoy for, or how often you open it.
All data — including your projects, endpoints, captured HTTP requests, and configured responses — is stored locally on your Mac in a SQLite database. This data is under your control and is never transmitted anywhere. You can delete it at any time by removing the application and its associated data.
Decoy runs a local HTTP server on your machine to receive incoming requests. This server only listens on your local network. Decoy does not make any outbound network connections to our servers or any third-party services.
Decoy is distributed through the Mac App Store. Apple may collect information related to your purchase and app usage in accordance with their own privacy policy. We do not have access to any data Apple collects.
If this privacy policy changes, the updated version will be posted on this page with a revised date. Because Decoy does not collect contact information, we cannot notify you directly of changes.
If you have questions about this privacy policy, you can reach us through decoy-app.com.