Privacy for Cameleon

This is the policy for Cameleon, the Safari extension. The other apps have their own: Folio Refresh, RefreshMyPhone and RefreshYourMac.

What it does on a page

• It reads colours. On a site you have allowed, Cameleon asks the browser what colour each element is already drawn in, works out replacements, and adds a stylesheet. All of that happens in the browser, in memory.
• It does not read what the page says. Text, form fields, passwords and images are never inspected. The only thing looked at is the colour a thing is painted.
• Nothing is uploaded. The extension contains no networking code of any kind, and macOS does not permit it to open a connection. There is nowhere for a page, an address or a colour to be sent. That is true of both editions, and it is the part of Cameleon that touches what you read.

Why it asks for access to websites

A browser extension cannot know in advance which sites you will want recoloured, so Safari lists Cameleon as able to read every site. Safari then grants that access one site at a time, when you say so, and you can take it back at any point in Safari ▸ Settings ▸ Extensions. A site you have not allowed is untouched and unseen.

What is stored, and where

• Your settings: which skin you chose, which skin goes with your Mac's light and dark appearance, and whether to leave already-dark sites alone.
• The sites you picked a skin for, as a list of addresses such as example.com, so that choice is still there next time.

Both are held in Safari's own extension storage. Safari syncs that between the Macs signed into your iCloud account, the same way it syncs bookmarks — it goes to Apple, under Apple's privacy policy, and never to us. Deleting the extension removes it.

What we never collect

• No account: there is nothing to sign into.
• No analytics, no adverts, no tracking, no crash reporting.
• No browsing history. We do not know which sites you visit, or that you use the app at all.

The purchase

There are two ways to buy Cameleon, and they differ in exactly one respect — whether the app ever opens a connection. Neither has anything to do with the pages you read.

• From the Mac App Store. Apple takes the payment and tells us nothing about you beyond anonymous sales totals. We never see your name, email or card. That build contains no networking code at all, in the app or in the extension.
• Downloaded from this site. You are buying through Lemon Squeezy, who are the merchant of record and who handle the payment and the receipt under their own policy. That build has a licence key, so when you paste a key in — and again if you remove it — the app sends the key and a name for the Mac to api.lemonsqueezy.com, which is how a licence covers two Macs rather than any number. That is the only connection it ever makes: there is no check at launch, nothing periodic, and the extension still has no way to open one. We see the order Lemon Squeezy shows us — your email and what you bought — and nothing else.

Your rights, and getting in touch

Because we hold no personal data about you, there is nothing for us to show you, correct or delete. If you think that is wrong, or you have any question about this policy, write to support@caddora.ie. The data controller is Caddora, Naas, Co. Kildare, Ireland. You may also complain to the Data Protection Commission in Ireland.

Changes

Last updated 29 October 2026. If what the app does ever changes, this page changes with it, before the build that changes it ships.