Security & Privacy

Last updated October 11, 2026

Footage of what happened is some of the most sensitive material you own: people's faces, number plates, your home, what was said. Camposite is built so it never leaves your Mac, so you can share exactly what you choose and nothing else, and so anyone can check your originals weren't altered.

Your footage never leaves your Mac

• Nothing is uploaded, ever. Lining up, playback, sound clean-up, blurring, enhancement, reading plates and signs, speech-to-text, reports and exports all run on your Mac.
• The app can't connect to the internet. It runs in Apple's App Sandbox without permission to make network connections, so it couldn't send your footage anywhere even by mistake.
• The AI runs on your Mac too. The detail-recovery model is built into the app, and finding faces, plates, people and vehicles, and bringing out voices, use Apple's on-device frameworks. No cloud AI service sees your video or hears your audio.
• Speech-to-text is on-device. It uses Apple's own speech recognition on your Mac. The first time, macOS may download Apple's language files, but your audio isn't sent.

Nothing collected about you

• No account and no sign-in.
• No analytics, tracking, advertising or crash-reporting services in the app. Its Apple privacy manifest declares that it collects no data and doesn't track.
• Only the files you choose. The sandbox lets the app open only files and folders you pick or drag in.

Share what you mean to, and nothing more

• Blur bystanders. Faces and number plates found in each camera can be blurred, pixelated or blacked out in the exported video, in stills and in the PDF report. Faces stay hidden as a head turns, number plates as the car or the camera moves, and any area you mark by hand follows what it covers as it moves.
• See exactly what will change before you export: a plain-language list of everything that will be applied.
• Enhanced pictures are labelled. AI-enhanced video is marked as illustrative in the report and the evidence pack, so no one mistakes it for what the camera recorded.

Proof your originals weren't altered

• Your originals stay as they were unless you choose Replace Original, which asks first.
• The evidence pack holds exact copies of your original files with a SHA-256 fingerprint of each, checked after copying, and a log of what was done. Anyone can recompute the fingerprints to confirm nothing changed.

A secure app

• Signed and hardened. The app is signed by its registered Apple developer and runs with Apple's hardened runtime, which stops other code being injected into it. Every part of it, including the bundled video-format library, carries the same signature.
• Regular security reviews. Camposite is part of a recurring security audit that checks how it handles files, permissions and your data, and anything found is fixed with a test so it can't come back.

Where your data lives, and how to delete it

• Projects, exports, reports and evidence packs are saved where you choose. They're ordinary files: move or delete them like any other. They are as protected as your Mac is, so turn on FileVault (System Settings › Privacy & Security) to keep everything on your Mac encrypted.
• The app's own working files (settings, logs, and playable copies of recorder formats) stay in its private folder, ~/Library/Containers/com.jeffhall.camposite. Delete the app and that folder to remove everything it ever kept.
• We hold nothing from the app, so there's nothing on our side to delete.

This website

• No cookies, no analytics, no trackers. The site is plain pages with no third-party scripts, fonts or embeds, served only over HTTPS.
• Hosting. The site is served by Cloudflare Pages. Like any web host, Cloudflare processes basic request data (such as your IP address) to deliver pages and protect against abuse. We don't use it to build profiles of visitors.
• The beta list. If you join the beta, we keep two things: your email address and the day you joined. They're stored in this site's own storage at Cloudflare, not with a newsletter company, and used only to send you the beta and the occasional question about it. We never sell or share them. Email us and we'll delete your address.
• Stopping abuse of the form. To limit how often one place can submit the form, we keep a scrambled, one-way code made from your IP address for up to an hour. The address itself is never stored.
• Emails you send us (for example, which cameras you have) are used only to answer you and to decide what to support next.

The app is in beta. If anything here ever changes, this page will change first.

Contact

Security reports, questions or deletion requests: [email protected].