ClipScrub
Changelog

What's been released

Every ClipScrub release, newest first. Each one has a SHA-256 of the disk image as uploaded, so you can check a download against the release.

Subscribe by RSS to remain up to date with releases.

0.5.1 build 22

  • A small reliability improvement.

SHA-256: ff76563d6b3c6a8f8a4b9924492f54838bca93a545567f4a07c2427f6fe626a6

0.5.1 build 21

  • Edit any reviewed video frame with the drawing tools. Selecting a tool preserves the current position and pauses playback.
  • Step backwards or forwards through reviewed frames. New marks follow the selected subject across the clip, and moving or resizing a mark updates that subject.
  • Deleting a selected rectangle no longer replaces the video editor with a scan failure. If tracking fails, the frame remains editable and export waits for the problem to be resolved.
  • Unfinished video reviews remain editable when you visit another History entry during the current app session. Undo and redo preserve video edits.

SHA-256: b7fc61788bf9f109c7dc8a8984ab986e4a545b39746daa780a10432cd9ea9211

0.5.1 build 20

  • ClipScrub catches more labelled medical-record and driving-licence numbers in text and screenshots. Review each result before sharing.

SHA-256: 060a5df403c0932fa243b9f359365442ef044d65db813bbb10604e429c684695

0.5.1 build 19

  • ClipScrub can now check for signed updates inside the app. You choose whether it checks daily, and every installation still needs your approval.
  • A redacted clip now keeps every audio track from the source instead of keeping only the first.
  • A clip now follows the categories you switch on or off in Settings ▸ Redaction. Its preview and export use the same choices.
  • After a scrub, ClipScrub can show a shareable receipt with counts by category. The receipt leaves out matched text, filenames and other identifying details.
  • A finished capture can now be dragged to another app on the first motion, even while that app is active.
  • Older documents in History now use much less memory. Their pages still reopen and export at full resolution.

SHA-256: 505e1cfedbf029220e95cb6f77d28090f16835de49d3ef24e123db23c35c215d

0.5.0 build 18

  • PDF exports now remove all system-added creation and modification timestamps.

SHA-256: c0905fbed5037ecb796a93e20087a3b45e26341b6c1cbf6e53dfa80a7c4e5532

0.5.0 build 17

  • PDF exports now remove all system-added creation and modification timestamps.

SHA-256: 9461a9d9f8eb7cd7c3cdb07f63d8909f68f8f4872704c67c4f5bf4dfb5e94f67

0.5.0 build 16

  • History now uses much less memory as it grows. During the current app session, up to five recent image entries remain fully editable. Older image entries reopen as finished redacted images. You can still view them, add marks and export them.
  • ClipScrub also releases finished captures and processed video or GIF frames sooner, which reduces memory growth during long sessions.

SHA-256: dd15c41c2430d6923c5df7132738ad1e3d4aee55fce916458684849b91d25638

0.5.0 build 15

  • Scrolling capture now supports upward scrolling. ClipScrub only looked for the page moving down, so scrolling up through a chat repeated some parts and lost others.
  • A red line marks each join ClipScrub could not line up. ClipScrub keeps the screens on either side. Scroll captures can show several of these on pages with many similar lines, such as terminal logs.
  • ClipScrub weighs up more possible joins, then picks between them.
  • A page with a header or footer fixed at the top or bottom stitches better now. They remain in place while the page scrolls, so ClipScrub leaves them out when it works from the scrollable area.

SHA-256: f07ef3db293731b442426d2607b2523428fd1f4d28ffbe098a60ebf17b5db4b1

0.5.0 build 14

  • An image saved from History, or kept there for a restore, now has no location, no camera and no timestamp. The previous build stripped that data from a fresh export, but left it on an image saved from History.

SHA-256: a4da4ad443c27aaa265fa04255d5011ead2e3a1d83125621fc38bafd098b57bf

0.5.0 build 13

  • Redacted PDFs keep the text outside every cover, so you can search and select the rest of the document. Text under a redaction or an opaque mark remains out of the saved file. A PDF that was a scan has no text layer to keep, so a scan still comes back as pictures.
  • Settings ▸ General ▸ PDF export has a Keep redacted PDFs searchable switch, on when you install ClipScrub. Turn that switch off and every PDF the app exports comes back as pictures. The clipscrub command takes --flatten-only to do the same to a PDF it writes.
  • The text in a redacted PDF is tagged run by run, so a screen reader reads it as text. The file sets no document language, and we have not tested one with VoiceOver.
  • A document saved in History keeps only that safe searchable text. Add another cover after restoring it, and the newly covered text is removed too.
  • A cover no longer takes the line underneath it out of the searchable text a redacted PDF keeps. The clearance around a cover reaches sideways only, so a receipt keeps the figures on the next row.
  • A redacted PDF page comes out at the size of the source page, wherever ClipScrub could read that size. ClipScrub draws each page at twice its size to read the text. That doubled size used to go into the exported file.
  • An exported image has no location, no camera and no timestamp. An exported PDF no longer records the version of macOS that produced the file, or the date of that copy.
  • Encounter, visit, admission and CSN numbers are redacted when they sit beside their label. A bare date after that label is still read as a date.
  • ClipScrub reads more column headings now. A phone number, a date of service and more of the name headings are among them. A value under one of those columns in a CSV, TSV or JSON file is redacted, where an earlier build left that value in the clear. The column heading is what tells ClipScrub what the cell holds.
  • A scrolling capture lines up two grabs differently than it used to. That change did not stop long captures repeating or dropping rows. This note said it had, and that was wrong. A red line marks each join ClipScrub was unsure about. A join ClipScrub was sure about can still be wrong, and nothing marks that one.
  • Settings ▸ Redaction has a Keep an audit log switch. Turn that switch off and nothing further is written. Clearing the log still writes its one entry saying a wipe happened, even with the switch off.
  • Redacting a clip can read three times as many frames. ClipScrub asks before each recording until you tell ClipScrub not to. Settings ▸ Recording ▸ Redaction detail switches between Standard and Smooth afterwards. That setting covers a clip you open as well as one you record. Smooth takes about three times as long.
  • ClipScrub can open itself once a capture has been scanned, so a screenshot is ready to review without a click. Off by default, in Settings ▸ Capture. A scrolling capture opened the app before this switch existed and still does, whichever way the switch is set.
  • Choose which exports get your corner mark. Images and Documents are set separately. The Details pane switches the mark on or off for the one file you have open. A file redacted straight to disk gets the mark now, and so do the images and PDFs a folder sweep writes. Neither of those routes marked a file before. A text file comes back unmarked, because there are no pixels to mark.
  • The Redact Text & Copy shortcut shows a Scrubbing indicator while the scan runs, so a slow scan no longer looks like nothing happened.
  • Settings ▸ Rules and the Local-Only AI tooltip now say that ClipScrub does not learn from a scan. Writing a rule is what catches a shape ClipScrub missed.
  • Neither scroll bar in the editor is hidden behind the footer on a tall image any more.
  • Text scanning is faster on a long page, because the name reader is built once for the page rather than once per line.
  • The clipscrub command mentions your older rules folder only when that copy holds something different. The command used to print that notice on every run, including inside a pipeline.

SHA-256: bccd60f79512e905a53e842cf47dd153422a1d10e8b1c5a78f76c7b7f8de6d49

0.4.0 build 12

  • ClipScrub no longer asks to access data from other apps the first time you open it. The app was signed in a way macOS could not match to its own settings folder, so it asked you for permission it should never have needed.
  • Custom rules written in an earlier build are picked up again. If yours are still missing, they are in a folder the app is no longer allowed to open. Run the clipscrub command once and that command copies your rules across.

SHA-256: 2bae0be3be31d0e416b4dba610a965cedd1b639ceec9cf112bffd7b2a8c57767

0.4.0 build 11

  • Settings can import or export your rules as a file now, and seven starter presets save you from writing rules from scratch.
  • Drop a folder on ClipScrub and the screenshots, single-page PDFs and data files inside come back redacted, written to a Redacted folder beside the originals. Every file the sweep took on comes back in the report, either redacted or named with the reason it was not.
  • Screenshots in Spanish, Japanese, Simplified Chinese or Arabic are read now, whichever of those languages your Mac supports. Emails, IP addresses and your own rules are caught in them. A rule keyed to an English label remains English-only.
  • Right-click a PDF, a Word document or an image and ClipScrub is offered as an option, the way it always was for a movie file.
  • Settings has a Feedback tab, alongside the Help menu and the toolbar button that already opened the form. It opens in your browser, so nothing leaves the app itself.
  • A box over a name that never moves in a screen recording now holds through a whole run of missed reads, instead of coming back on partway through.
  • The audit entry for an exported document identifies the PDF you shared, not the page you happened to be looking at.
  • The Settings window keeps its title bar when it reopens with the app, so the close and minimise buttons no longer sit on top of the General tab.

SHA-256: 92e16db6f5a3718c452d7890bbb0525417e3fc0dd02c387da0621963cb730d03

0.3.0 build 10

  • Screen recordings are silent. The setting that recorded system audio is gone, and a recording now has no sound track at all.
  • A clip you open from somewhere else still keeps its own audio when you export it.
  • Your watermark prints larger on exports, and the wording field shows a screenshot credit as its example.
  • Settings names the version your licence key covers, and a key bought for an earlier version remains saved rather than refused.

SHA-256: b93e4fb10e596d24c044f766ba7c7d686cf6c22853a8f2761379215a8de10d03

0.3.0 build 9

  • Draw a box around any part of a capture, and that area is removed before the file is saved.
  • Create rules for identifiers your team uses, and ClipScrub keeps them after you reopen the app.
  • Keep an app out of captures, and add a personal watermark to exports.
  • A verified licence key now gets a clear confirmation instead of a quiet screen change.

SHA-256: b64f976bc131e261727a1f2e48d593e06234b49cd6878ce73acfccaf5d1e91d3

0.2.1 build 8

  • Redaction covers the word, not the whole line of text around it.
  • Record numbers written in an unusual shape are caught by the rules layer instead of being missed.
  • Ordinary clinical words, such as a condition or a questionnaire name, are no longer marked as if they identified someone.
  • Words remain covered when a long screenshot is read in overlapping pieces and two reads disagree by a pixel.
  • A corrupted trial date no longer locks you out of your own app.
  • The clipscrub command-line tool states macOS 15 as its floor, which is the only version it was ever built for.

SHA-256: c14ca567e4b536a6a6761a13b7800c344407656b6ddf358f00963d98a449145a

0.2.0 build 7

  • Boxes you draw by hand survive "Redact again" instead of disappearing.
  • The first moment of recorded audio is kept, and a recording that would hang on finishing now completes.
  • A dropped capture keeps its file and its audit entry together.
  • Failures writing the audit log are surfaced rather than passing as normal.
  • The redaction switch is hidden where a clip would ignore it.
  • Licence emails show the ClipScrub brand and say where to get help.

SHA-256: b275b7f49e0476ef4efc3e3024116e4217aa6cf6a52f20c9bffd4335e8e2704b

0.2.0 build 6

  • The first build recorded in the public release ledger.

SHA-256: 5bbd36fc07419b049836777d83c5c651eeb68905ed7869ec1dbbe65459b30bb7

Releases before build 6 are not listed. The script that records a publish did not exist yet, so nothing captured their checksums at the time. A checksum written down afterwards would vouch for a file nobody can still verify.

ClipScrub helps you find and remove sensitive information. It is not a compliance service, does not guarantee complete de-identification, and is not legal advice. Detection is not exhaustive — review every result before sharing. For a formal de-identification determination, consult a qualified expert.