Privacy Policy

The short version

Rockxy runs entirely on your Mac. It collects no data, sends no analytics, includes no telemetry, requires no cloud connection, and needs no account to use. There is nothing to opt out of because there is nothing to opt into.

Information we do not collect

Rockxy does not collect, transmit, or store any of the following on remote servers:

• Personal information (name, email, address, payment details)
• Usage analytics or behavioral tracking
• Crash reports or diagnostic data
• IP addresses
• Cookies or web tracking tokens
• Device identifiers or hardware fingerprints
• Location data
• Browsing history or intercepted traffic content

Local data storage

All data Rockxy creates is stored locally on your Mac. Here is exactly where:

• SQLite database — Active and saved sessions, log entries, and transaction metadata are stored in a SQLite database at ~/Library/Application Support/Rockxy/.
• Response body files — Response bodies larger than 1 MB are stored as individual files in the bodies/ subdirectory within the same folder.
• Root CA private key — The private key for the locally-generated root Certificate Authority is stored in your macOS Keychain, protected by macOS system security.
• Root CA certificate — The public root CA certificate is stored at ~/Library/Application Support/com.amunx.Rockxy/rockxy-ca.pem and installed to your system keychain with your explicit consent.
• Proxy backup — The privileged helper tool stores a backup of your original proxy settings at /Library/Application Support/com.amunx.Rockxy/proxy-backup.plist with restricted file permissions (0o600) for crash recovery.

Network connections

The only network connections Rockxy makes are the ones you initiate: proxied traffic between your applications and their upstream servers, and replay requests you explicitly trigger. Rockxy never phones home, checks for updates silently, or contacts any Rockxy-owned server.

Third-party SDKs

Rockxy includes no third-party analytics, crash reporting, or tracking SDKs. The only external dependencies are open-source Swift packages for networking (SwiftNIO), cryptography (swift-crypto, swift-certificates), and storage (SQLite.swift). None of these packages collect or transmit data.

Data retention

You control all data retention. Clearing a session deletes its data from memory and disk. Uninstalling Rockxy and removing the ~/Library/Application Support/Rockxy/ directory removes all stored data. There is no remote backup, no cloud sync, and no data that persists outside your machine.

Children's privacy

Rockxy is a developer debugging tool and is not directed at children under the age of 13. Since Rockxy collects no data from any user, no special provisions for children's data are necessary.

International users

No data leaves your device. There are no servers, no cross-border data transfers, and no data processing agreements required. Rockxy operates entirely within the local environment of your Mac regardless of your geographic location.

Your rights

Because Rockxy collects no personal data, the data subject rights provisions of GDPR, CCPA, and similar regulations do not apply in the traditional sense. You have full control over all data on your machine. You can view, export, and delete any data Rockxy stores at any time through the application or by directly managing the files on disk.

Open-source transparency

Rockxy is fully open source under the Apache 2.0 license. You can verify every claim in this policy by reading the source code at github.com/LocNguyenHuu. There are no hidden network calls, no obfuscated telemetry, and no closed-source components.

Changes to this policy

Updates to this privacy policy are versioned in the Rockxy source repository on GitHub. The effective date at the top of this page reflects the most recent revision. Material changes will be noted in the project changelog.

Contact

If you have questions about this policy, open an issue on GitHub.