Security & privacy, verifiably
Docket runs entirely on your Mac. There is no Docket server, no account, and no telemetry, so the app has nothing to phone home to. This page enumerates every network connection the app can make, because "trust me, it's local" is a claim, and a list you can check is evidence.
Every connection, enumerated
This list is generated from the code, not from memory. Nothing else is in the binary.
| Connection | When | What is sent |
|---|---|---|
| Your Jira | On sync, and when you write back | Your queries; your comments/transitions. Authenticated with your own token, sent only to the host you configured. |
| Your Confluence | On sync | A mentions query, your token. |
| Figma (api.figma.com + its image CDN) | On sync; thumbnails on demand | Your token; file keys of the files you watch. |
| Your Dovetail / Miro | On sync, only if connected | Your token. |
| Google Calendar (direct) | Never in a stock install. Docket ships no Google OAuth client, and your calendar comes from your Mac's own calendars through Apple's EventKit — which is not a network connection at all. This route opens only if you create an OAuth client in your own Google Cloud project and write its client ID and secret into your config file by hand. If you do, then on sync and on token refresh: www.googleapis.com and oauth2.googleapis.com. | Your own OAuth tokens; the focus blocks you approve. Until you do that, nothing — neither host can be reached. |
| Slack (slack.com) | On sync, only if you added a workspace | Your own user token (scope search:read); a search for messages that mention you. Read-only — the app cannot post, edit or mark anything in Slack. |
| Your mail server (IMAP) | On sync, only if you added a mailbox | Your IMAP login. Read-only by protocol — the app uses EXAMINE and PEEK, so it cannot mark mail read, move or send anything. Headers only — with one deliberate exception: when a message contains a calendar invitation (a text/calendar part), that part alone is fetched so the invitation can be shown. Prose bodies are never fetched or stored. |
| Your own feeds | On sync, only if you added any | The URL and header you configured. Nothing else. |
| AI engine | Only when you ask for a draft | Default is on-device (Apple) — no network at all. If you configure one yourself, prompts go to that vendor with your key, and to exactly one host: Gemini → generativelanguage.googleapis.com, Claude → api.anthropic.com, Ollama → localhost:11434 (on your Mac, so still no network), custom endpoint → the URL you typed. Your choice, visible in Settings. |
| Lemon Squeezy (licence) | On activation, then at most once a day | Your licence key and a random device UUID. Never your data. Offline keeps working for 14 days between checks — and everything already synced stays readable forever. |
Two rows mention googleapis.com, for unrelated reasons. That is
why this list names subdomains: generativelanguage.googleapis.com is Gemini answering a
draft you asked for, and it is the only one of the two a normal install can ever reach.
www.googleapis.com or oauth2.googleapis.com would be calendar traffic
— impossible unless you built your own OAuth client, so if you see either without having done
that, treat it as a bug and report it.
Not in this list, because it does not exist: analytics, crash reporting, an update beacon, a Docket server of any kind.
Verify it yourself
Run Docket behind Little Snitch
(or any outbound firewall) for a day. You should see connections to exactly the hosts you
connected in Settings, plus api.lemonsqueezy.com. If you ever see anything
else, that is a bug and a broken promise, and the moment you report it, it becomes the most
urgent thing on the board.
Where your data lives
Everything Docket stores is plain, readable files on your Mac: JSON you can open, back up, and take with you. No proprietary database, no lock-in. The export button gives you all of it at once.
Honest detail: your source tokens are stored in a config file with owner-only
permissions (0600) in your user library, readable by you and by software
running as you, like any dotfile. Moving them into the macOS Keychain is on the roadmap.
The discontinuation pledge
Docket is built by one person and the code is not open source, because a paid app is what keeps us building it. Two commitments in return: your data is never hostage (plain files, export always, and everything already synced stays readable even if your subscription lapses), and if we ever stop maintaining Docket, we will open the source. Obsidian made the same pledge.
Want it when it opens?
One short note when it opens, plus the occasional build update. Founding seats go in the order people join, and the first twenty-five pay €12/month for as long as they stay, against an €18 rate.