Monitor projects. Mask pastes.
Monitor project folders before AI tools see them. Clean sensitive clipboard text before you paste it somewhere you cannot take it back.
No cloud account.No server-side scanning.No “trust us”.Offsend runs on your Mac.
- Everything stays on your Mac
- Open source on GitHub
- Signed & notarized by Apple
- No account required
- Nothing uploaded
.cursorignoreCursor.aiexcludeGemini.cursor/rules/privacy.mdcCursor.gitignoreGitAI makes oversharing easy.
You open a project in Cursor. You paste a ticket into ChatGPT. You copy an invoice, API response, or internal domain. Most of the time, nothing bad happens. The one time you paste a key, token, or customer identifier, you wish something quiet had been in the middle.
DATABASE_URL=postgres://prod_user:[email protected]/main”
Authorization: Bearer sk-Aw3xQ7nRJLp2vK8mTfcZbY9hUe…”
.env.local → STRIPE_SECRET=sk_live_51H…
because .cursorignore never listed it
Offsend is not trying to be a giant security platform. It is a small Mac utility that helps catch obvious leaks before they become expensive ones.
Check Directory
Know before you point an AI tool at your repo.
Audit any repo before you open it in Cursor, Copilot, or Claude.
Drop a project folder. Offsend checks AI ignore files and flags sensitive paths that exist on disk but are not ignored. Clear status: PASS, WARNING, or FAIL.
Free: basic audit · Pro: full coverage + one-click Fix it
Catch slips after the first check.
Turn on background watch and Offsend re-audits when ignore files or sensitive paths change. Get notified when a folder moves from pass to warning or fail.
Free: 1 watched folder · Pro: unlimited watched folders
Someone adds a .env, drops keys into the tree, or a repo that was clean yesterday is not clean today.
Every major AI editor. The ignore files they expect.
Check Directory audits ignore rules and exposed paths — not file contents. Free covers the editors most people use; Pro adds the rest. Fix it (Pro) writes missing ignore files in one click.
Safe Paste
Paste without the sensitive parts.
Tuned for what people actually paste into AI.
Hover any cell to see the placeholder Offsend swaps in. Every built-in detector — secrets, personal data, and business IDs — is free. Custom dictionaries are Pro. Nothing leaves your Mac.
One hotkey before you paste.
Press ⌘⇧V before you send text to ChatGPT, Claude, Slack, or email. Offsend masks keys, tokens, emails, IDs, and internal terms — then pastes the safer version. Press ⌘⇧R to restore originals when you need them back.
Press ⌘⇧V anywhere
It works in any text field — browsers, terminals, and IDEs included.
→ Safe Paste triggered
→ clipboard read on your request
Fast local scan
Offsend scans for secrets, contact info, money, and more — right on your Mac, with no round trip to a server.
● 1 critical · API key
● 3 medium · PII
Masked text gets pasted
ChatGPT, Slack, Mail, or any target app receives the masked version. Keep encrypted mappings on your Mac to restore later — 1 hour on Free, longer on Pro.
re contract {{CONTRACT_1}}
for {{AMOUNT_1}}
Get an answer about your data — without sharing your data.
Mask once, chat using placeholders, then bring the real values back with one shortcut. The mapping stays encrypted on your Mac and is deleted when its timer runs out.
Local-first by design.
Directory checks, background watch, Safe Paste, masking, and restore run on your Mac. Offsend does not store prompt text, clipboard payloads, or detected secret values. Directory audits use paths and ignore rules, not file bodies.
- Offsend reads your clipboard when you press Safe Paste (⌘⇧V), or if you turn on optional clipboard monitoring in Settings.
- Mappings are encrypted on disk. Key in Keychain. You stay in control.
- No account needed. Install, grant the permissions, and go.
- Signed and notarized for macOS, so it passes Gatekeeper out of the box.
Network activity · illustrative
Not only for developers.
Offsend helps anyone who juggles project folders and paste-heavy workflows — customer support, finance, ops, legal, and engineering teams who use AI tools daily and cannot afford a careless paste.
Logs, configs, traces.
Paste logs into ChatGPT, queries into Cursor, traces into Claude — with Safe Paste, not prod tokens or DB URLs.
Spec docs and tickets.
Summarize PRDs and CRM exports without handing customer emails, contract IDs, or ARR figures to a third party.
Conversation cleanup.
Press ⌘⇧V before AI summarizes them — names, addresses, order IDs, and card tails get masked.
Contracts and invoices.
Use AI on contracts, invoices, and statements while keeping IBANs, card numbers, and counterparties out of the prompt.
Safe AI without the ban.
Let the team keep using ChatGPT, Claude, and Cursor — with a local guardrail that catches obvious leaks before they get expensive.
Catch exposed paths before the agent does.
Run Check Directory before an AI agent indexes the repo, and use Safe Paste for anything sensitive that still lands in chat.
Pro when you need more than the basics.
Start free with unlimited Safe Paste, Restore, and every built-in detector — one watched folder included. Upgrade when you need custom terms, longer Restore timers, full Check Directory coverage, and one-click Fix it. Same local-first privacy on every plan.
Everything in Free, plus custom dictionaries, extended Restore TTL, and full Check Directory with Fix it.
Regular $49/year after launch · upgrade inside the Mac app · magic-code activation
- Custom dictionariesMask client names, companies, projects, internal domains, and sensitive terms.
- Mapping TTL up to 24 hoursKeep encrypted placeholder mappings for 1h, 6h, 24h, or never store — your choice.
- Check Directory — full coverageEvery supported AI tool, infra and cloud secret patterns, and unlimited background watch.
- Fix it — one-click ignore filesGenerate or update AI ignore files for missing rules automatically.
- Custom ignore templateSave a company-wide ignore standard in Settings and reuse it across projects.
- Use on up to 2 MacsActivate with the same email and magic code — no user accounts.
Free covers the basics. Pro covers your job.
Both plans share the same privacy, shortcuts, and built-in detectors. Pro adds custom dictionaries, longer Restore timers, extended Check Directory coverage, unlimited background watch, Fix it, and a second Mac.
Answers before you install.
Short, honest answers about how Offsend behaves on your Mac. Missing something? Email us.
Where does Offsend work?
Anywhere you can type. Safe Paste targets the focused text field, so it works in ChatGPT, Claude, Cursor, VS Code, Terminal, Slack, Notion, Mail — anything that accepts a paste.
Why not gitleaks/trufflehog?
Gitleaks and TruffleHog scan git history, pull requests, and CI — they catch secrets after they land in a repo. Offsend protects a different layer: your editors and AI tools, where leaks happen before anything is committed. Safe Paste runs when you paste into ChatGPT, Cursor, Slack, or Mail. Check Directory finds sensitive paths and files that coding assistants might read. Same class of detectors, different moment — the clipboard and the chat box, not git push.
Does it replace ⌘V?
No. ⌘V stays untouched for everyday pastes. Offsend lives on ⌘⇧V — opt-in, by design. Both shortcuts are remappable.
Does it work offline?
Yes. Detection, masking, risk scoring, and restore all run locally. The only network call Offsend makes is checking for app updates (Sparkle) — verifiable with Little Snitch or any network filter.
What permissions does Offsend need?
Accessibility — so it can type the masked text into the active app on your behalf. Without it, Offsend gracefully falls back to “Mask & Copy” and lets you paste manually.
What happens to mappings between sessions?
Mappings live encrypted in a local SQLite store with a key in the macOS Keychain. Free keeps them for up to 1 hour. Pro adds 6 / 24 hours and “never store”. After TTL, restore is impossible. One click in Settings clears everything.
Is anything sent to your servers?
No prompt content, no clipboard content, no detected values, no app names, no window titles. Local counters stay on your Mac. The Privacy Report inside the app lists exactly what Offsend tracks locally.
How does Pro activation work?
No accounts. Buy Pro inside the app via Freemius, get a 6-digit magic code by email, paste it once — the license binds to your Mac. Activate a second Mac with the same email and code; manage billing from the in-app Freemius portal.
Free vs Pro in one line?
Free covers the daily basics: unlimited Safe Paste and Restore, every built-in detector, 1-hour encrypted mappings, core Check Directory coverage, and background watch for one folder. Pro adds custom dictionaries, longer timers, extended tool and path coverage, Fix it, unlimited watched folders, ignore templates, and a second Mac.
What if I change my mind?
Quit and uninstall — your workflow stays yours and nothing leaves with us. For Pro purchases, refunds are handled by Freemius per our refund policy.
Catch obvious leaks before they get expensive.
Download for macOS — no accounts, no cloud scanning. Free includes one watched folder and unlimited Safe Paste. Upgrade to Pro when you need more.