Waypoint privacy policy

Waypoint stores your links on your Mac; an optional account syncs them end-to-end encrypted. Links to GitHub fetch public numbers from GitHub unless you switch that off.

Last updated: 1 November 2026

Waypoint is made by Alexander Sedeke, Prague, Czech Republic. This policy covers the Waypoint Mac app, the Waypoint browser extensions for Chrome, Edge, Brave, Helium, Firefox, Zen and Safari (where it comes inside the Mac app), the web app at waypoint.vizis.cz and the VIZIS account at account.vizis.cz.

In short

Your links stay on your Mac, and Waypoint works without an account. If you create a VIZIS account — to keep several Macs in sync, use the web app or share groups — everything you save is encrypted on your device before it leaves it: our server stores it but cannot read it. No analytics, no tracking, no advertising. One thing leaves your Mac even without an account: for links to GitHub repositories, each device asks GitHub for their public numbers (see GitHub numbers below), unless you switch that off.

What the browser extension does

The extension shows Waypoint’s panel in your browser and talks to the Waypoint app on the same Mac, at 127.0.0.1 (your own computer). It talks to nothing else.

• Tabs: it reads the address and title of a tab when you save it, and the address of the page you are on so the panel can show that page’s group. Nothing is stored or sent anywhere except to the Waypoint app on your Mac.
• Tab groups: when a new tab opens, it asks the Waypoint app on your Mac whether the app just opened that address, so the tab can join the tab group of its Waypoint group. The app answers only for links it opened in the last minute and does not keep the address. It creates and names tab groups only for tabs Waypoint opened.
• Storage: it keeps its connection to the app and a few settings in the browser’s own extension storage. Saves made while the app is not running wait there until the app is back.
• Bookmarks (only when you import them): when you click Import this browser’s bookmarks…, the browser asks you for access to your bookmarks. The extension reads them once, hands them to the Waypoint app on your Mac, and gives the access back right away.
• Context menu: it adds Save to Waypoint to the right-click menu.
• Side panel: it shows the panel (Chromium browsers).

The extension does not read the content of pages, does not inject anything into websites, and does not use remote code.

What the Mac app does

The app keeps your links, groups, topics and settings in an encrypted database file on your Mac, with daily backups beside it (encrypted too). The key is stored in your Mac’s Keychain. After you save a link, the app fetches that page’s icon and short description directly from the website you saved, the same way your browser would. When you open a link, the app hands it to the browser you chose.

Start page

If you turn on the start page (Settings › Start page), the Waypoint app on your Mac serves it at a local address (127.0.0.1, your own computer) — nothing is fetched from the internet to show it, and nothing about it leaves your Mac. The page shows only what you keep in its Start page group: your own links and groups there, never anything private (private groups and private links are left out, also when presenting mode is off), nothing archived, and nothing outside that group. Because it has to open in a browser tab without signing in, any program on your Mac can open the page and read what it shows. The page can change only its own layout and tile size. Import from Dashy reads the conf.yml you choose on your Mac; the selfh.st icons it names are downloaded from the public icon collection through the jsDelivr CDN (cdn.jsdelivr.net), which sees your IP address and the icon names — not your links.

Diagnostic log

Waypoint notes errors in a log file on your Mac (Settings › Data › Diagnostic log). It never contains your links, titles, groups or notes, and Waypoint sends it nowhere — Show log opens it in Finder, so you can attach it to an email or a GitHub issue if you want help. If we ask you to, switch on Detailed log: it then also holds the names of the GitHub repositories Waypoint reads. Switch it off again afterwards.

Links from shared groups and agents

Links in a shared group, and links saved by an AI agent, never make your Mac open pages on your private network (your router, NAS or local servers): Waypoint does not fetch their title, description or icon from such addresses. Your own links still get their title, description and icon, also for localhost and intranet addresses.

Your VIZIS account and sync (only if you create one)

The account syncs your links between your Macs and the web app, and lets you share groups with other people. It runs on our server at waypoint-api.vizis.cz, hosted by Cloudflare in the EU.

• What we cannot read: your links, titles, notes, descriptions, group and topic names, logos and settings — including the GitHub sign-in. Your devices encrypt them before they are sent, with keys we never have. The web app decrypts them in your browser.
• Your password never leaves your device. The server keeps only a value derived from it that proves you know it; it cannot be turned back into your password. Your recovery kit is the only way back if you forget it — we cannot reset it for you.
• What the server does see: your email address; the name and language you enter in your account; your devices and when they signed in; which groups you share, with whom (their email addresses) and in which role; and how many encrypted items you have, their size and when they changed.
• Email: we send account email from account@vizis.cz (through Cloudflare’s email service): confirming your address, and telling you when a new device signs in, your password changes, or your recovery kit is replaced or used. These emails never contain anything from inside your account.
• Sharing: the people you share a group with can read that group’s links — that is what sharing is. Links you mark private stay with you.
• Payments: if you buy a plan, Paddle handles the payment as the merchant of record. We receive the state of your subscription, never your card details.
• Deleting the account (in your VIZIS account, under Security) removes it and everything stored for it from our server. What is on your Mac stays there.

Agents

If you connect an AI agent (MCP), it reaches the app on your Mac with a token you created, and can read and change your links. What the agent does with that data is governed by the agent’s own terms. You can revoke the token and undo the agent’s changes in the app at any time.

GitHub numbers

Links to GitHub repositories show how many issues and pull requests are open there, and the repository’s stars and forks. In Settings › Connections you can also connect GitHub, to include your private repositories and show what is waiting for you.

• Without connecting: for links to GitHub repositories, each of your devices asks GitHub (api.github.com) for their open issues, pull requests, stars and forks — anonymously, without an account. GitHub answers only for public ones. GitHub sees the request from your IP address. This is on by default; you can switch it off in Settings › Connections. The numbers stay on that device and are never sent to VIZIS.
• If you connect it, what Waypoint can see: it uses the GitHub App “VIZIS Waypoint” with read-only access to issues, pull requests and basic repository information. It never sees code and never changes anything on GitHub. Private repositories count only where you (or your organisation’s owner) installed the app.
• If you connect it, where the requests go: each of your devices asks GitHub directly (api.github.com) for the repositories in your saved links. The counts stay on that device; they are never sent to us.
• If you connect it, your sign-in: GitHub’s sign-in token is kept with your Waypoint settings. If you use Waypoint on several devices with an account, it travels to them end-to-end encrypted, like your links — we cannot read it.
• Disconnecting: Disconnect removes the sign-in and the cached numbers from all your devices. It does not switch off the public numbers; to stop all requests to GitHub, switch “GitHub numbers” off in Settings › Connections. To withdraw Waypoint’s access at GitHub too, revoke it under GitHub › Settings › Applications.

What GitHub does with these requests is governed by GitHub’s own privacy statement.

Your control

Everything is yours: export it from Settings › Data, or delete it by removing the app and its data folder (~/Library/Application Support/com.vizis.waypoint). Removing the extension removes its storage.

Changes and contact

If this policy changes, the date at the top changes too. Questions: hello@vizis.cz. Bugs and wishes are welcome as issues at github.com/vizis-hq/waypoint-releases.