Pancake Stack privacy policy

Effective 13 October 2026

Pancake Stack ("Pancake") runs websites on your Mac. It is published by Enfour, Inc. This policy explains what it stores, what leaves your Mac and what Enfour receives.

What Enfour collects

Nothing. Pancake has no Enfour account and no sign-in, and sends Enfour no analytics, usage statistics, crash reports or advertising identifiers. Enfour does not receive your sites, their files or databases, the names of your sites or domains, or any record that you ran the app.

Where your data is kept

Your sites, their databases, logs, backups and Pancake's settings are stored in the app's own container on your Mac, or in folders you picked yourself. Passwords, API keys and tokens are stored in the macOS Keychain. If you use KeyRotate, keys are shared with it through a Keychain group on your Mac (AI provider keys, and Cloudflare, Vercel, here.now and cloud-server tokens), unless you turn that off in Settings ▸ KeyRotate. Certificates you paste in for your own domains are stored in Pancake's container and read only by its web server.

What leaves your Mac — only when you ask

Pancake contacts a third party only for a feature you turn on, with credentials you entered, and directly from your Mac. Each service applies its own privacy policy, and Enfour is not a party to these requests:

• Cloudflare, when you publish a test link or a site on your own domain;
• a hosting provider, cloud provider or deploy service you add (for example an SFTP host, Netlify, Vercel, AWS);
• a DNS provider, Let's Encrypt and your router (NAT-PMP/UPnP) for "Straight from this Mac";
• an SMTP service you configure for outgoing mail;
• an S3-compatible bucket you configure for off-site backups — backups are encrypted on your Mac first, with a key only you hold;
• ntfy, Gotify or Pushover for push alerts you turn on;
• your own iCloud (CloudKit private database): on every plan, a small record with this Mac's name and the names of the sites it is serving online, so your plan's online-site limit counts all your Macs; and, when you turn on sync between your Macs, the sites list and settings — never passwords or keys;
• Pancake Cloud, when you save a site: your own server (SFTP), an S3-compatible bucket or your iCloud Drive — each archive is encrypted on your Mac with a passphrase only you know;
• Apple Intelligence (on your Mac, or Apple's Private Cloud Compute) for the Assistant; and, only if you switch it on, a cloud AI provider you choose with your own key — passwords and keys are removed from what is sent;
• wordpress.org, Packagist, PyPI and Git hosts when you ask Pancake to install or clone something.

Sites you serve are reachable from your network or the internet only when you turn that on; by default only your Mac can open them.

Subscription

Pancake is sold as auto-renewing subscriptions through the App Store. Apple processes payment, renewal, cancellation and refunds under its own terms. Enfour does not see your payment details.

Children

Pancake is a developer tool and is not directed at children.

Retention and your choices

Everything Pancake stores stays until you delete it. Settings ▸ Advanced ▸ Remove All Pancake Data deletes all of it from your Mac (site folders go to the Trash). Copies you made elsewhere — a deployed site, a bucket, your iCloud — are under your control at those services.

Contact

Questions: Pancake support. We will update this page if the app's handling of data changes; the date above shows the latest revision.