Privacy
Privacy Policy
Humble Tools makes small, focused Mac apps and Safari extensions. This policy covers the Humble Tools Safari extensions (the "Extensions"): Full Page Screenshot, SuperVideo, Last Login, Autofill Forms, and Site Routes; the Mac app Humble Search (see its own section); and the marketing website at humbletools.app. It is written to be true, not to fill space.
The short version
The Extensions do not track your browsing, do not read your passwords for us, contain no advertising, and send nothing about the pages or sites you visit. What each tool does happens on your Mac. An Extension talks to us for itself in two ways, and you can turn each one off in its Settings: an update check ("what is the latest version?") and anonymous usage counts (on a day you use the app: which app, its version, your macOS major version, and a random id made only for that app). Never URLs, sites or content. The marketing website uses privacy-respecting analytics so we can improve the site. We never join a website visit to how you use an Extension. Humble Search, our Mac app, searches your files on your Mac and never sends us what you search for or your file names; if you buy it, we keep a purchase record and it checks its license about once a day.
Who is responsible
The data controller is Humble Tools, operated by Nicolas Mertens. Questions: support@humbletools.app.
What each Extension accesses, and why
To function, browser extensions must be granted access to web pages. Here is exactly what each one touches and why, and what it does NOT do.
- Full Page Screenshot: when you trigger a capture, it reads the visible content of the tab you are on to stitch a full-page image, which is saved to your Downloads folder on your device. The image is never uploaded anywhere.
-
SuperVideo: reads video elements on pages you visit so it can change
playback speed, fill the window, and toggle captions. Caption auto-translate is performed by
the site's own player (for example YouTube), not by us; no caption text or viewing data is
sent to us. The "time saved" total for ads played at 8x is two numbers (ads sped up and
seconds saved) kept on your device only.
If you choose "Not working here? Ask us to add this site" and confirm, SuperVideo sends only the app name "supervideo" and the site's domain, such as vimeo.com. The request contains no page address, path, query, title, video details or installation identifier, and no cookies. Our request service stores only a count for that domain and the first and last calendar day it was requested. It does not store IP addresses, user agents or individual request records. Your browser remembers which domains you already requested so it does not send them again; "Delete all my data" clears that list, but cannot remove a contribution from the anonymous counts already received. Requests happen only after your confirmation, never automatically. - Last Login: reads sign-in form fields on pages you visit to show you which account or method you last used, entirely on your device. It never stores, transmits, or has access to your passwords or credentials on any server.
- Autofill Forms: reads and fills form fields on the page you are on, using a profile you keep on your Mac. Your profile never leaves your device and is not sent anywhere.
- Site Routes: routes the websites you choose through a VPN you already pay for (or choose to buy), while every other site stays direct. It runs a helper on your Mac and talks to that helper only on localhost. Optional host access for a site is used only for the cloak (timezone / WebRTC consistency) on that site. Declining that permission does not stop routing; it only skips the cloak.
Broad site access ("all sites") is requested only where a tool must work on whatever page you choose. Site Routes does not ask for all sites up front; it requests a site when you choose to route that site. Access is used solely for the feature above and for nothing else.
Data we collect
Inside the Extensions (product use): none of your browsing content, form values, passwords, or VPN configs leave your device for us. Settings you choose (for example a default speed, or which sites Site Routes should route) stay in local storage on your Mac and can be removed by uninstalling the Extension or clearing its data.
Update check: if "Check for a newer version once a day" is on (the default), the Extension requests a public version list from our download host, normally about once a day. Site Routes, Full Page and Last Login may check again when reopened after a failed check or when their cached list is older than the installed version; SuperVideo waits for its next daily check unless you choose "Check now". That request names which app is checking and, for most apps, its version (major.minor). Turn the toggle off and the daily check stops. Since Site Routes 1.12.7 the off switch also covers opening the Site Routes popup and Settings: with the toggle off, nothing is checked until you choose "Check now". Older releases still ask once when you open them yourself, with the same content as above: Site Routes 1.12.6 and earlier (popup and Settings), and the current Full Page and Last Login releases (their Settings pages); their next release gets the same fix. "Check now" always runs, because you asked. The Site Routes Mac app also checks its own update feed through Sparkle (the standard Mac updater, which sends the app's version); that check is separate and the Extension toggle does not control it. For both we store only aggregate counters: app name, version, UTC day, and coarse country from the network edge. We do not store your IP address, a device id, a cookie, or a user-agent.
Anonymous usage counts (in releases from October 2026 on; earlier versions do not send them). Downloads do not tell us whether anyone actually uses a tool, so each Extension sends a small count. It is on by default and you turn it off with Send anonymous usage counts in that app's Settings. Off means nothing is sent: no usage counts and no setup steps (below). Exactly these six fields are sent, and our server rejects any request that carries anything else:
app: which app (siteroutes, fullpage, lastlogin, supervideo or humblesearch).id: a random install id (32 hex characters) made on your Mac, for that one app only. Each app keeps its own id in its own storage, so ids are never shared across apps. Reset install id in Settings replaces it with a new random one.v: the app's version number.os: your macOS major version (for example 15 or 26), or 0 when the app cannot tell.age: how many whole days since this install's first active day (0 on that day), so we can count repeat use without keeping any history on our side.ev: one of four events.active: at most once per day, on a day you bring up the app's popup or use its main feature.installed: once, when the Extension is installed.first_use: once, the first time the main feature works (a capture, a remembered sign-in, a speed change, a routed site).pro_unlocked: once, when Site Routes Pro is active on that install.
Never sent: URLs, sites, domains, page titles, routed sites, sign-ins, file names, video or page content, your email, a cookie, or any identifier other than the random id above. Requests carry no cookies and no referrer. On the server, the id is used only to count each install once per day: it is hashed with a secret key that changes every day, and the hashes are deleted after 48 hours. The id itself is never stored. What we keep is per-day totals per app: how many installs were active, grouped by days since their first active day (0, 1 to 6, 7 to 13, 14 to 29, 30 or more), by version and by macOS major, plus how many of each event. We do not store your IP address, a user-agent, or your country for these counts.
Downloads: when you download a tool from get.humbletools.app we count the download the same aggregate way (app, day, referrer hostname only, country). Optional short channel tags on links (for example a post-specific code) are counted in bulk, never as a profile of you.
Setup funnel (aggregate only): to understand where people drop off between
download and a working install, an Extension may fire a few one-time setup beacons
(for example: extension enabled, VPN connected, first site routed, first-route
coach shown or dismissed). Each step is sent at most once per install, names only the app
and an allow-listed step, and may include an allow-listed VPN provider id (for example
nord) with no country and no credentials. Coarse "how many sites" milestones
(for example routes_1 / routes_3 / routes_10) never list domains. We store only bulk
counters (app, step, day, country). No install id, no page content, no browsing history.
These steps follow the same Send anonymous usage counts switch: off means
none are sent. The apps' own windows (outside Safari) send nothing.
Site Routes failed-heal report: if routing cannot be
restored after an automatic rebuild, Site Routes may send an allow-listed
snapshot (app, version, reason tokens such as
proxyTrafficDead, a probe kind such as exit:7,
a site count, heal attempt counts). No domain list, no VPN credentials,
no install id, no IP stored. We file that as a private GitHub report. The
same fingerprint is not sent again for 24 hours. You can also send the
same snapshot yourself from Send error log.
Humble Search (Mac app)
Humble Search is a Mac app, not an Extension, so it has its own rules. It searches your files
on your Mac. To do that it builds an index of file and folder names in
~/Library/Application Support/Humble Search on your Mac. If you turn on
Search inside files, that local index also covers what is inside your files.
The index never leaves your Mac. With your permission (Accessibility) it types what you type
into Spotlight's own field too, also on your Mac. It talks to us in three ways:
- Anonymous usage counts, on by default, off with Share anonymous
usage counts in its About window. The same six fields as above
(
appishumblesearch), with these events, each at most once per day: installed, active, app launched, panel shown, a search done today, 10 or more and 50 or more searches today, how fast a search answered (under 10 ms, 10 to 50, 50 to 200, over 200), a result opened, shown in Finder or copied, and setup steps (typing into Spotlight enabled, Full Disk Access granted, Accessibility granted, setup skipped). Never sent: what you type or search for, file names, paths, folders, file contents or result counts. - Updates through Sparkle (the standard Mac updater, which sends the app's version), on by default, off with Check for updates automatically in Settings.
- Your purchase, only if you buy it. Payment is handled by Stripe; we never see your card. When the payment completes, Stripe tells our server, and we keep a purchase record: the checkout id, your email, the amount, the date, the license status, and for each Mac you activate its random activation id with the dates it first and last checked in. If you tap "These are all my Macs", we note that request and its date. Each Mac is a random activation id the app makes (separate from the usage id, so turning usage counts off never breaks a purchase). To activate, the app sends that id plus your checkout id or your purchase email. While the app runs, an activated Mac checks its license status, normally no more than once every 24 hours (a failed check may retry), sending only its activation and that id; this check is part of the purchase and runs even when usage counts are off. One purchase covers up to 3 of your Macs. If a purchase shows up on more Macs than it covers, or you tap "These are all my Macs", the operator of Humble Tools gets a private notification (through Telegram) with the checkout id and the number of Macs, so a person decides; nothing is switched off automatically. We do not store your IP address, a hardware serial or any fingerprint.
Affiliate links (VPN providers)
Site Routes does not include a VPN. When we mention a commercial VPN you can buy, we may use a partner link for NordVPN and Proton VPN. If you sign up through those links, we may earn a commission. It does not cost you extra. We never see who signed up: there is no user-level callback to us, only aggregate reporting inside the partner dashboard (clicks, conversions, earnings with no link to your Site Routes install). Mullvad and other providers may be named without an affiliate link.
We do not rank providers by commission. Recommendations and UI order should follow how well a provider works with Site Routes, not what pays us. Affiliate links belong at "I need a VPN" moments, not as a tax on people who already connected one.
The marketing website
humbletools.app is separate from the Extensions. The site uses privacy-oriented analytics (including Cloudflare Web Analytics and DataFast) to understand traffic and which pages help people find the right tool: page views, referrers, and coarse performance. These tools are not used to track you across other companies' sites for advertising. They are not linked to Extension use.
Sharing, selling, tracking
We do not sell your data. We do not run advertising or analytics SDKs in the Extensions or in Humble Search. Payments are processed by Stripe under its own terms; Humble Search purchase records are stored on Cloudflare infrastructure we operate. Purchase alerts to the operator go through Telegram and carry only a checkout id and a count of Macs. Aggregate download, update-check and usage counters are processed on infrastructure we operate (Cloudflare Workers and Workers KV). Site analytics providers process website traffic under their own terms for the purpose of operating those analytics. We do not build a cross-site advertising profile of you.
Retention and deletion
Local Extension settings live only on your Mac under your control. The usage install id lives only in that app's storage on your Mac: Reset install id replaces it, Delete all my data or uninstalling removes it (an "off" choice stays off). On our side, the per-install hashes used to count each install once per day are deleted after 48 hours; after that nothing links the counts to any install. The per-day totals are kept and have no per-person row to delete. Website analytics retention follows the providers' defaults for those products. Humble Search purchase records are kept for as long as we sell and support Humble Search, and for as long as tax and accounting rules require. Write to us and we remove your email (and its lookup entry) from your purchase record by hand; your activated Macs keep working, but you can no longer activate a new Mac by email. If you have a privacy question, contact support@humbletools.app.
Your rights
EU and EEA users retain their GDPR rights. For Extension product use we do not hold a personal profile on our servers. For website analytics and aggregate counters, contact us and we will help with any request we can fulfill. Write to support@humbletools.app.
Children
The Extensions are general-purpose utilities and are not directed at children. They collect no personal data from anyone; the anonymous counts above are the same for every user.
Tools still in development
Grocery Verdict is not yet released. It may need to fetch product information over the network when it ships; this policy will be updated with exactly what it accesses and what, if anything, it sends. Site Routes is released and is covered by the statements above (on-device helper, optional per-site cloak, aggregate update checks, setup steps and anonymous usage counts only).
Changes
If this policy changes, we will update this page and the effective date above.