FetchMiso privacy

Introduction

FetchMiso is a local-first desktop application for building, sending, and inspecting HTTP requests. It is still in development and has no public release yet. This policy describes how FetchMiso is designed to handle your information.

When FetchMiso gains new features, such as environments, credential storage, or update checks, this policy will be updated before those features ship.

Who is responsible

Edeeson Opina maintains FetchMiso as part of the Miso Ecosystem and is responsible for this policy. The source repository is not public yet.

Information accessed

FetchMiso works with the requests you build: the address, method, query parameters, headers, authorization, and body, including any file you attach to a multipart upload. It also reads the responses that the servers you call send back.

That information is used only to send your request and show you the response. It is never sent to a Miso service, and there is no Miso cloud backend.

Information processed

Requests are sent by FetchMiso's built-in engine on your computer. Response text up to 256 KiB is kept in memory. Larger or binary responses are written to a temporary file under fetchmiso/responses in your system's temporary folder, readable only by your user account.

Session history is kept in memory only. It is never written to disk and is cleared when you close FetchMiso or choose Clear history.

Saved requests and collections

When you save a request, FetchMiso writes it as JSON into a workspace folder you choose, and writes only inside that folder. Before a request is written, these values are removed:

• Basic authentication passwords
• Bearer tokens
• API key values
• Custom authorization header values
• Authorization, Proxy-Authorization, Cookie, and Set-Cookie header values
• The full local path of files attached to multipart uploads (the file name is kept)

Export and import

An exported collection file leaves the same values out again, and stores the workspace name but not its location on your computer. Importing a file removes passwords, tokens, cookie values, and upload paths again before anything is written, even if they were added to the file by hand. The file you import is not changed.

Credential storage

FetchMiso does not store your passwords, tokens, or API keys. A saved request keeps a reference such as the header name, not the secret value, and reopening a request does not bring the value back. Settings do not store credentials.

Operating-system credential storage is not implemented yet. Before it ships, this policy will say where secrets are kept.

Network requests

FetchMiso connects only to the addresses you send requests to. By default, requests carry the User-Agent header FetchMiso/0.1.0. Certificate verification is always on.

Redirects are followed by FetchMiso itself. When a redirect leads to a different site, the Authorization, Cookie, and Proxy-Authorization headers and your secret headers are removed, and redirects that embed a username or password are refused.

FetchMiso includes no telemetry, analytics, advertising, crash reporting, or automatic update service.

Local settings

FetchMiso stores your preferences in the app's local storage on your computer: theme, response display options, request timeout and redirect settings, panel layout, and the location of the last workspace folder so it can reopen it. The keys are fetchmiso.settings.v1, fetchmiso.inspector.v1, fetchmiso.layout.v1, and fetchmiso.workspacePath.v1.

To stop FetchMiso reopening your last workspace, choose Settings, General, Stop restoring the last workspace.

Clipboard

FetchMiso uses the clipboard only when you choose a Copy action. Copy as cURL leaves secrets out unless you choose the action labeled as including them.

Third-party services

FetchMiso uses no third-party services. The servers you send requests to are run by others, and what they do with your requests is covered by their own policies.

Data sharing

There is no Miso account and no server that receives your requests, responses, or collections. FetchMiso does not sell or share any information.

Data retention

Session history and in-memory responses end when FetchMiso exits. Saved requests and exported files stay where you put them until you delete them. Temporary response files can stay in your system's temporary folder until FetchMiso removes them or your system clears that folder. Local settings stay until you change them or remove FetchMiso.

User controls

You choose what to save and where, which workspace to open, and when to clear history or delete requests, folders, and collections. Collections are ordinary files, so you can also read, move, or delete them yourself.

Security

The FetchMiso window can only minimize, maximize, close, and open file dialogs. It has no general access to your files and cannot run shell commands. Headers that contain line breaks are rejected, response files outside FetchMiso's own folder are never touched, and passwords and tokens are removed from error messages.

Your privacy rights

Depending on where you live, you have rights over your personal information, including anything FetchMiso handles.

Because FetchMiso keeps your data on your own computer, you can also view or delete it yourself at any time.

Under the EU and UK General Data Protection Regulation (GDPR), you can ask to access, correct, or delete your personal information, restrict or object to its processing, and receive a portable copy. You can also lodge a complaint with your local data protection authority.

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), you can ask what personal information has been collected about you, and ask for it to be corrected or deleted. You will not be treated differently for using these rights.

We do not sell or share personal information, as those laws define selling and sharing, and we do not use it for targeted advertising or profiling.

To make a request, email ed@misoecosystem.com. We respond within one month. We may ask for details that help us confirm the request is yours.

Children's privacy

Miso tools and this website are not directed to children under 13, or under 16 in the European Economic Area and the United Kingdom. We do not knowingly collect personal information from children.

If you believe a child has sent us personal information, email ed@misoecosystem.com and we will delete it.

Changes to this policy

When FetchMiso's behavior or this policy changes, we update it on this page and change the "Last updated" date at the top. If a change materially affects how your information is handled, we will say so clearly on this page before it takes effect.

This version is effective as of October 20, 2026.

Contact

Questions about FetchMiso or this policy can be sent to Edeeson Opina at ed@misoecosystem.com. Please do not include passwords, tokens, API keys, or other secrets in your message.