Local-first · catch leaks to AI tools on your Mac

Monitor projects. Mask pastes.

Monitor project folders before AI tools see them. Clean sensitive clipboard text before you paste it somewhere you cannot take it back.

No cloud account.No server-side scanning.No “trust us”.Offsend runs on your Mac.

Download for macOS macOS 13+ · 5.4 MB· Apple Silicon & Intel · free tier includes 1 watched folder
  • Everything stays on your Mac
  • Open source on GitHub
  • Signed & notarized by Apple
  • No account required
  • Nothing uploaded
Check Directoryscanning…
orca-api~/code/orca-api
FAIL
3 issues found2 fail1 warn1 ok
Suggested fixes
FAIL
.cursorignoreCursor
Add ignore rules for .env, secrets/ and keys
FAIL
.aiexcludeGemini
Create file to keep credentials out of context
WARNING
.cursor/rules/privacy.mdcCursor
Add a privacy rule for the agent
PASS
.gitignoreGit
Already excludes secrets — no change needed
Select fixes to apply
The problem

AI makes oversharing easy.

You open a project in Cursor. You paste a ticket into ChatGPT. You copy an invoice, API response, or internal domain. Most of the time, nothing bad happens. The one time you paste a key, token, or customer identifier, you wish something quiet had been in the middle.

.env
“Hey ChatGPT, why is this 500ing?
DATABASE_URL=postgres://prod_user:[email protected]/main
Production credentials sent to a third-party model
API key
“Fix this error:
Authorization: Bearer sk-Aw3xQ7nRJLp2vK8mTfcZbY9hUe…
One paste, key rotates from your CI
AI editor
Cursor indexed the whole repo, including
.env.local → STRIPE_SECRET=sk_live_51H…
No paste needed — the editor read it for you
AI agent
Agent opened secrets/id_rsa
because .cursorignore never listed it
A private key, straight into the model's context

Offsend is not trying to be a giant security platform. It is a small Mac utility that helps catch obvious leaks before they become expensive ones.

01

Check Directory

Know before you point an AI tool at your repo.

On-demand audit

Audit any repo before you open it in Cursor, Copilot, or Claude.

Drop a project folder. Offsend checks AI ignore files and flags sensitive paths that exist on disk but are not ignored. Clear status: PASS, WARNING, or FAIL.

Free: basic audit · Pro: full coverage + one-click Fix it

Works with
.cursorignore.copilotignoreClaude CodeWindsurf.aiexclude
Paths and ignore rules onlyNothing uploaded
Background watch

Catch slips after the first check.

Turn on background watch and Offsend re-audits when ignore files or sensitive paths change. Get notified when a folder moves from pass to warning or fail.

Free: 1 watched folder · Pro: unlimited watched folders

When it helps

Someone adds a .env, drops keys into the tree, or a repo that was clean yesterday is not clean today.

Ignore rules & tools

Every major AI editor. The ignore files they expect.

Check Directory audits ignore rules and exposed paths — not file contents. Free covers the editors most people use; Pro adds the rest. Fix it (Pro) writes missing ignore files in one click.

Free · toolsCursorCopilotClaude Code
Free · rules.cursorignore.copilotignore.gitignoreAGENTS.md
Pro addsWindsurfGeminiContinueAiderZedCody.aiexclude.llmignore
Checks paths against ignore rules — nothing uploaded. Missing rules? Fix it (Pro) writes the files for you.
02

Safe Paste

Paste without the sensitive parts.

Detection

Tuned for what people actually paste into AI.

Hover any cell to see the placeholder Offsend swaps in. Every built-in detector — secrets, personal data, and business IDs — is free. Custom dictionaries are Pro. Nothing leaves your Mac.

Secret detectors includeOpenAI keyAWS access keyGitHub tokenSlack tokenStripe keyJWTSSH private keyDB URL w/ passwordBearer tokenHigh-entropy string
Critical secrets are masked before paste by default — not sent in the clear.
Critical · secret
API keys & tokens
sk-Aw3xQ7nRJLp2vK8mTfcZbY9hUe…kT3B{{API_KEY_1}}
Critical · secret
Private keys & certs
-----BEGIN RSA PRIVATE KEY-----{{PRIVATE_KEY_1}}
Critical · finance
Card numbers · IBANs
4242 4242 4242 4242{{CARD_1}}
Medium · PII
Email addresses
Medium · PII
Names & phone numbers
Julia Morton · +1 (415) 555-0102{{PERSON_1}} · {{PHONE_1}}
Medium · org
Company names
Acme Corp, NorthBeam, Lumen Bio{{COMPANY_1}}, {{COMPANY_2}}
Low · business
Contract & case IDs
CONTRACT-92831 · CASE-A2-77B{{CONTRACT_1}} · {{CASE_1}}
Low · business
Amounts & salaries
$148,500.00 ARR · $12k MRR{{AMOUNT_1}} ARR · {{AMOUNT_2}} MRR
Pro · custom
Custom dictionaries
NorthBeam · INTERNAL/codename-orca{{COMPANY_1}} · {{CODENAME_1}}
How it works

One hotkey before you paste.

Press ⌘⇧V before you send text to ChatGPT, Claude, Slack, or email. Offsend masks keys, tokens, emails, IDs, and internal terms — then pastes the safer version. Press ⌘⇧R to restore originals when you need them back.

01 — Safe Paste

Press ⌘⇧V anywhere

It works in any text field — browsers, terminals, and IDEs included.

V
→ Safe Paste triggered
→ clipboard read on your request
02 — Detect

Fast local scan

Offsend scans for secrets, contact info, money, and more — right on your Mac, with no round trip to a server.

scan complete · 4 hits
1 critical · API key
3 medium · PII
03 — Mask & paste

Masked text gets pasted

ChatGPT, Slack, Mail, or any target app receives the masked version. Keep encrypted mappings on your Mac to restore later — 1 hour on Free, longer on Pro.

Email {{PERSON_1}}
re contract {{CONTRACT_1}}
for {{AMOUNT_1}}
Restore · ⌘⇧R

Get an answer about your data — without sharing your data.

Mask once, chat using placeholders, then bring the real values back with one shortcut. The mapping stays encrypted on your Mac and is deleted when its timer runs out.

01 — Mask
Contract CONTRACT-92831 · $148,500
Email {{EMAIL_1}}
Contract {{CONTRACT_1}} · {{AMOUNT_1}}
02 — Ask the model
Draft a follow-up to {{EMAIL_1}} about {{CONTRACT_1}} renewing at {{AMOUNT_1}}.
Hi {{EMAIL_1}}, just checking in on {{CONTRACT_1}} — happy to confirm {{AMOUNT_1}} for another year…
model only sees placeholders
03 — R
just checking in on CONTRACT-92831
happy to confirm $148,500 for another year…
Restored locally from Keychain-backed mapping
Mapping TTL:Free · 1 hour maxPro · 1 hour6 hours24 hoursNever storeWhen the timer ends, restore is gone for good. By design.
Privacy

Local-first by design.

Directory checks, background watch, Safe Paste, masking, and restore run on your Mac. Offsend does not store prompt text, clipboard payloads, or detected secret values. Directory audits use paths and ignore rules, not file bodies.

  • Offsend reads your clipboard when you press Safe Paste (⌘⇧V), or if you turn on optional clipboard monitoring in Settings.
  • Mappings are encrypted on disk. Key in Keychain. You stay in control.
  • No account needed. Install, grant the permissions, and go.
  • Signed and notarized for macOS, so it passes Gatekeeper out of the box.

Network activity · illustrative

On device
Detect & mask
100% local
To the cloud
Outbound bytes
0 B
clipboard → mask → paste target
Verifiable via Little Snitch & macOS network filter
Your text never leaves your Mac · no cloud · nothing uploaded
Who it's for

Not only for developers.

Offsend helps anyone who juggles project folders and paste-heavy workflows — customer support, finance, ops, legal, and engineering teams who use AI tools daily and cannot afford a careless paste.

Developers · SRE

Logs, configs, traces.

Paste logs into ChatGPT, queries into Cursor, traces into Claude — with Safe Paste, not prod tokens or DB URLs.

Product · Analytics

Spec docs and tickets.

Summarize PRDs and CRM exports without handing customer emails, contract IDs, or ARR figures to a third party.

Customer support

Conversation cleanup.

Press ⌘⇧V before AI summarizes them — names, addresses, order IDs, and card tails get masked.

Legal · Finance · Accounting

Contracts and invoices.

Use AI on contracts, invoices, and statements while keeping IBANs, card numbers, and counterparties out of the prompt.

CTO · Security leads

Safe AI without the ban.

Let the team keep using ChatGPT, Claude, and Cursor — with a local guardrail that catches obvious leaks before they get expensive.

Solo on Cursor / Claude Code

Catch exposed paths before the agent does.

Run Check Directory before an AI agent indexes the repo, and use Safe Paste for anything sensitive that still lands in chat.

Pricing

Pro when you need more than the basics.

Start free with unlimited Safe Paste, Restore, and every built-in detector — one watched folder included. Upgrade when you need custom terms, longer Restore timers, full Check Directory coverage, and one-click Fix it. Same local-first privacy on every plan.

Launch promo · save $20/year
Pro

Everything in Free, plus custom dictionaries, extended Restore TTL, and full Check Directory with Fix it.

$29/year

Regular $49/year after launch · upgrade inside the Mac app · magic-code activation

Download & upgrade
Free tier included · cancel anytime · processed by Freemius
  • Custom dictionariesMask client names, companies, projects, internal domains, and sensitive terms.
  • Mapping TTL up to 24 hoursKeep encrypted placeholder mappings for 1h, 6h, 24h, or never store — your choice.
  • Check Directory — full coverageEvery supported AI tool, infra and cloud secret patterns, and unlimited background watch.
  • Fix it — one-click ignore filesGenerate or update AI ignore files for missing rules automatically.
  • Custom ignore templateSave a company-wide ignore standard in Settings and reuse it across projects.
  • Use on up to 2 MacsActivate with the same email and magic code — no user accounts.
Free vs Pro

Free covers the basics. Pro covers your job.

Both plans share the same privacy, shortcuts, and built-in detectors. Pro adds custom dictionaries, longer Restore timers, extended Check Directory coverage, unlimited background watch, Fix it, and a second Mac.

Feature
Free
Pro
Safe Paste via ⌘⇧V (local, on demand)
included
included
All built-in detectors (PII, business IDs, API keys & secrets)
included
included
Custom dictionaries (clients, companies, projects, domains)
included
Mapping TTL (Restore via ⌘⇧R)
1 hour max
1h / 6h / 24h / never
Background watch — watched folders
1 folder
unlimited
Check Directory — core tools (Cursor, Copilot, Claude, git)
included
included
Check Directory — extended tools + path patterns
included
One-click Fix it for ignore files
included
Editable ignore template (company-wide standard)
included
Devices
1 Mac
2 Macs (work + home)
Privacy: local · Keychain · encrypted
included
included
FAQ

Answers before you install.

Short, honest answers about how Offsend behaves on your Mac. Missing something? Email us.

Where does Offsend work?

Anywhere you can type. Safe Paste targets the focused text field, so it works in ChatGPT, Claude, Cursor, VS Code, Terminal, Slack, Notion, Mail — anything that accepts a paste.

Why not gitleaks/trufflehog?

Gitleaks and TruffleHog scan git history, pull requests, and CI — they catch secrets after they land in a repo. Offsend protects a different layer: your editors and AI tools, where leaks happen before anything is committed. Safe Paste runs when you paste into ChatGPT, Cursor, Slack, or Mail. Check Directory finds sensitive paths and files that coding assistants might read. Same class of detectors, different moment — the clipboard and the chat box, not git push.

Does it replace ⌘V?

No. ⌘V stays untouched for everyday pastes. Offsend lives on ⌘⇧V — opt-in, by design. Both shortcuts are remappable.

Does it work offline?

Yes. Detection, masking, risk scoring, and restore all run locally. The only network call Offsend makes is checking for app updates (Sparkle) — verifiable with Little Snitch or any network filter.

What permissions does Offsend need?

Accessibility — so it can type the masked text into the active app on your behalf. Without it, Offsend gracefully falls back to “Mask & Copy” and lets you paste manually.

What happens to mappings between sessions?

Mappings live encrypted in a local SQLite store with a key in the macOS Keychain. Free keeps them for up to 1 hour. Pro adds 6 / 24 hours and “never store”. After TTL, restore is impossible. One click in Settings clears everything.

Is anything sent to your servers?

No prompt content, no clipboard content, no detected values, no app names, no window titles. Local counters stay on your Mac. The Privacy Report inside the app lists exactly what Offsend tracks locally.

How does Pro activation work?

No accounts. Buy Pro inside the app via Freemius, get a 6-digit magic code by email, paste it once — the license binds to your Mac. Activate a second Mac with the same email and code; manage billing from the in-app Freemius portal.

Free vs Pro in one line?

Free covers the daily basics: unlimited Safe Paste and Restore, every built-in detector, 1-hour encrypted mappings, core Check Directory coverage, and background watch for one folder. Pro adds custom dictionaries, longer timers, extended tool and path coverage, Fix it, unlimited watched folders, ignore templates, and a second Mac.

What if I change my mind?

Quit and uninstall — your workflow stays yours and nothing leaves with us. For Pro purchases, refunds are handled by Freemius per our refund policy.

Catch obvious leaks before they get expensive.

Download for macOS — no accounts, no cloud scanning. Free includes one watched folder and unlimited Safe Paste. Upgrade to Pro when you need more.

macOS 13 Ventura or later · Apple Silicon & Intel · 5.4 MB· signed & notarized