Redact means gone.

How automatic redaction actually works

When you use Hide personal info, Plumón scans the current screenshot on your Mac using Apple's Vision framework, which runs locally and never uploads the image. It looks for emails, phone numbers, and card- or account-length number strings, and proposes a box over each one it finds. Nothing is blacked out yet at this point.

You review the proposals: dismiss anything that was flagged by mistake, or click any text it missed (a name, a handle, an address) to add your own box. Only when you confirm does Plumón commit every remaining box to a solid, irreversible black fill in one step. The scan, the proposal, and the redaction all happen on your Mac, start to finish.

Plumón deliberately does not try to auto-detect names, because name detectors are unreliable for names outside a narrow set of common English ones, and a missed name is a real privacy leak. Rather than give false confidence, Plumón asks you to add names yourself.

What "signed and notarized" means

Every copy of Plumón is signed with a Developer ID issued by Apple and submitted to Apple's notary service, which scans it for known malicious content before it's allowed to run on your Mac without a security warning. This is the same process legitimate, trustworthy Mac software goes through; it doesn't mean Apple reviewed what the app does, only that the specific file you downloaded matches what was submitted and hasn't been tampered with.

What this website collects (separate from the app)

The app itself collects nothing. This website, plumon.app, uses a privacy-focused, cookieless analytics service to see roughly how many people visit and which pages they read. It does not use cookies, does not track you across other sites, and does not collect any personal information; it only counts page views in aggregate.