Privacy

Updated 5 November 2026

This website

The site has no cookies, no analytics and no scripts, and it loads nothing from other companies. It is hosted by Cloudflare, which keeps ordinary server logs to run and protect the service.

If you leave your email address, it is stored with Cloudflare and used for one thing: a single message when the first version of the app is ready. If you write through the contact form, your address and message are stored the same way and used to answer you.

To have your address removed, write through the contact form.

The app

Ocelot File Manager runs on your Mac and keeps your data there. It collects nothing about you and sends nothing on its own: no analytics, no crash reports, no accounts.

Only these things leave your Mac:

• Servers you add. The app talks to the address you entered (for S3 without an address, the service’s regional endpoint) and sends what the protocol needs: your sign-in, the paths you browse, the files you transfer. Plain HTTP is used only after you confirm it for that server.
• Network volumes. SMB, AFP, NFS and WebDAV mounts go through macOS, which asks for credentials and stores them as it always does.
• Local network. While Network is open in the sidebar, as it is by default, the app browses the local network for file-sharing and screen-sharing services to list servers and Macs. macOS asks for your permission first; declining leaves the list empty.
• Share Screen. The app hands a vnc:// address to the system’s Screen Sharing app, which handles the connection.

Passwords and access keys for the servers you add are stored in the macOS Keychain.

Plugins

JavaScript plugins run in an isolated context; process plugins run in a sandbox. A plugin reaches the network only with a permission listed in its manifest, which you see before enabling it. What a plugin does with the files it reads is governed by its author’s own policy, not this one.

Changes

A change in what the site or the app collects comes with a change on this page.