Privacy policy

Last updated July 11, 2026

This policy is published by Cover Redact LLC. In this policy, "we", "us", and "our" mean Cover Redact LLC, the company that makes Cover, and "the app" means the Cover software running on your Mac. The short version: the app processes your PDFs on your device, and their contents are not transmitted to us. This page covers what the current version of the app and this website actually do.

Your documents

Two different things happen with a PDF, and this policy keeps them separate.

First, the app. Cover's redaction engine opens and processes your PDF on your Mac, the same way any local application processes a file you give it. That processing happens on your device, under your control, and works with no network connection.

Second, us. The current version of Cover does not transmit your documents or their contents to us or to any third party, so we never receive them. We do not collect, store, sell, or share the contents of your documents.

If a future version of Cover offers an optional feature or program under which any document data is shared with us (for example, to help improve Cover), it will operate only if you explicitly opt in, and its own terms and disclosures will be presented to you before you enroll. Unless and until you opt in to such a feature, the contents of your documents are not collected.

The app today

Everything the current version of Cover does to a PDF happens on your device. The redaction engine runs locally as a bundled part of the app. Your documents, and every value redacted out of them, stay on your Mac.

The current version has no accounts and no sign-in, and it includes no in-app analytics and no usage tracking. The app does not know who you are, and neither do we.

If Cover crashes, it sends us an anonymous crash report so we can find and fix the bug: the app version, the macOS version, and where in the code it failed. Crash reports are built to never include your documents, their contents, your file names, or anything you typed. They carry no name, no email, and no identifier, because the app has none to send. If you would rather not send even that, you can turn crash reports off in Settings.

What the app talks to the network for

Today the app contacts the network for two kinds of housekeeping, and neither carries any document data.

Update checks. The app contacts download.coverredact.com to ask whether a newer version exists, and, if you choose to install it, to download that update. You can turn automatic checks off in Settings.

Crash reports. If the app crashes, it sends an anonymous technical report to crash.coverredact.com describing where the code failed, so we can fix it. It never includes your documents or anything from them, and you can turn it off in Settings.

As Cover grows, this list will grow with it. Buying the app, for example, will involve a payment step and a license check. Any new call gets listed here, and one rule never changes: none of these calls carry your documents or their contents.

If you would rather the app never reach out at all, keep the Mac offline: redaction itself works fully offline.

The website and your email

To download Cover you enter your email address. We use it to send your download link and getting-started tips, and to keep you posted about Cover: new versions, launch news, and things we think are genuinely worth your time. Every message has a working unsubscribe link, and unsubscribing sticks. We do not sell or rent your email address, and we do not share it with advertisers.

The website currently uses privacy-respecting, cookieless analytics that count aggregate page views only. No cross-site tracking, no advertising pixels, no personal profile built about you.

Service providers

Like nearly every small company, we rely on a few service providers to run the business. Today that means an email provider (Loops) to deliver the messages above, and hosting and download infrastructure (Cloudflare) to serve this site and the app. Providers like these process only what they need to do their job, such as your email address or standard server logs. None of them handle the contents of your documents, because the current version of Cover does not transmit those contents to us or to them.

Changes to this policy

Cover is a young product and this policy will evolve with it. We may update this page as the product and the business grow, and we will move the "last updated" date whenever we do. If a change is material, we will say so plainly here instead of hoping nobody notices. The section about your documents at the top stays as written.

Contact

Questions about privacy? Reach us through the help page. We read every message.