PinboardShot is a local-first macOS app. Security fixes are normally released for the latest public version only.
| Version | Supported |
|---|---|
| Latest public release | Yes |
| Older releases | Best effort |
Please report security issues privately instead of opening a public issue.
Use GitHub's private vulnerability reporting for this repository when available:
https://github.com/agent-club/PinboardShot/security/advisories/new
If private vulnerability reporting is unavailable, open a minimal public issue that says you need a private contact channel. Do not include exploit details, screenshots with sensitive content, credentials, logs, or user data in the public issue.
Security-relevant areas include:
- Screenshot capture, annotation, pinning, history, clipboard, and local storage behavior.
- macOS Screen & System Audio Recording permission handling.
- Software update checks, Sparkle appcast handling, update package verification, and download URLs.
- Website download links and published release artifacts.
- Build, signing, notarization, and release scripts.
Out of scope:
- Vulnerabilities in third-party services that host releases, downloads, notarization, or CDN delivery, unless PinboardShot misconfigures its own integration.
- Issues caused by modifying local builds, disabling macOS security controls, or installing unofficial packages.
- Social engineering, phishing, or physical access attacks.
PinboardShot does not require an account, does not provide cloud sync, and does not include analytics or advertising SDKs. Screenshots, annotations, pins, recent history, optional invisible watermark records, shortcuts, and preferences are processed locally on the user's Mac by default. Network access is used for software update checks and update downloads. If the user explicitly configures a remote OCR plugin and invokes the OCR annotation tool, only the selected image region is sent to that configured service; history indexing and smart redaction remain on-device.
See the public privacy policy:
https://pinboardshot.agentclub.dev/privacy
After a report is received, the project will aim to:
- Acknowledge the report within 7 days.
- Confirm whether the issue is reproducible and in scope.
- Prepare a fix and release notes when the issue affects users.
- Credit the reporter if requested and appropriate.
Please allow time for investigation before public disclosure, especially for update, signing, notarization, or installer issues.