Privacy

The short version: your storage credentials and your objects never reach us. Cargocat talks to your provider from your own machine, directly or through a network proxy you choose.

Your storage credentials

Access keys and secrets are stored in your operating system's keychain — Keychain Services on macOS, Credential Manager on Windows and Secret Service on Linux. They are never written to a configuration file in plain text, never included in a diagnostic log, and never transmitted to us. The native storage layer uses them to sign requests to the endpoint you configured.

Your objects

Storage traffic goes from your machine to the endpoint you configured. We operate no storage proxy, relay or cache. If you or your system configured a network proxy, the request follows that route instead. Previews are served by a loopback HTTP server bound to your own machine, which is not reachable from the network.

Network proxies

A proxy entered under Settings → Network is used for storage requests, SSO sign-in, feedback and update checks. Hosts on its bypass list, and this computer's own addresses, are reached directly. Leave it blank to use the system configuration and HTTPS_PROXY as usual. The proxy configured inside Cargocat is not applied to Aptabase analytics or Sentry crash reports.

What the app records locally

• An activity trail of the changes you make, stored on your machine for your own reference. You can clear it at any time.
• A diagnostic log for bug reports, redacted by construction: credentials and signed URLs are removed, object keys are replaced by short digests, and your home-directory path is stripped.

Neither is uploaded anywhere unless you choose to attach one to a support email, or the app's diagnostic log to feedback sent from the app.

Analytics and crash reports

The app shares anonymous usage data by default. You can turn it off at any time under Settings → Privacy → Share anonymous usage data. Turning it off sends one final event recording the opt-out; after that, neither of the services below receives anything.

• Usage analytics, sent to Aptabase. These are named events from a fixed list: the app started, a connection was added, a connection test succeeded or failed, an object was previewed, and a transfer started, completed or failed. Events carry no details of what you did — no object keys, bucket names, endpoints, file paths or anything you typed. Each event includes the app version, your operating system and version, and your locale.
• Crash reports, sent to Sentry, for errors in the app and its interface. Before a report leaves your machine, your computer's name, user details, local variables and console output are removed, credentials are redacted, and quoted names in error messages — where object keys and bucket names usually appear — are replaced. That last step is a best-effort filter: a name that appears unquoted in an error message can get through. Memory dumps are never sent.

Both services see your IP address when the app connects to them. See Aptabase's privacy policy and Sentry's privacy policy.

Purchases

The public beta is free and has no checkout or activation. When paid licenses become available, payments will be processed by Stripe. We receive the email address used for payment and Stripe's transaction identifiers so that we can issue and support a license. We do not see your card number. Stripe's handling of payment details is covered by Stripe's privacy policy.

License activation

Public beta builds make no activation request. In stable releases, entering a purchased license key sends that key to our license service. The service checks whether it is active and records the time it was last checked. We do not send or store a device identifier, computer name, storage credential, bucket name or object name with that request. Cloudflare sees the IP address used to make it, as it does for any request to this website.

The license key is kept in your operating system's keychain. The app also stores a signed entitlement locally so it can work offline; that entitlement contains an opaque license id, the license plan and issue and expiry times, not your email address or purchase key. The app normally tries to renew it after seven days when a connection is available.

Email delivery and support

When paid licenses become available, license keys will be delivered using Resend. When you use the support form, your name, email address, selected topic and message are also delivered to us using Resend. Feedback sent from the app carries the same fields, plus whichever of these you leave included: the app version, your operating system, the name of your storage provider, the version of the system component that draws the app's window, and the diagnostic log. It never carries a bucket name, an object name or a credential. Direct support email and form submissions are received and stored in Fastmail. Email addresses and support messages are used to reply and provide support, not for a marketing list. See Resend's privacy policy and Fastmail's privacy policy.

This website

Every page here is a static file served by Cloudflare. There are no analytics scripts, no advertising trackers and no cookies. Cloudflare processes request metadata such as your IP address in order to serve and protect the site; see Cloudflare's privacy policy.

To stop abuse, feedback sent from the app is limited to a few messages a minute from one IP address. Cloudflare keeps that count briefly; we do not store it.

When you click a download button, we count it: the platform, the version, the country Cloudflare reports for the request, and which page the button was on. We do not store your IP address, your browser details or anything else that identifies you.

Your data rights

Ordinary use of the beta and this website gives us no personal data directly. If you contact support by email or through the form, we receive what you send.If paid licenses become available, we will also hold the email address and license record attached to a purchase. Email support@cargocat.app to see, correct or delete personal data we hold about you.

Children

Cargocat is a developer tool and is not directed at children under 13.

Changes

If this policy changes in a way that affects what we collect, the date at the top of this page changes with it.

Contact

Questions about any of the above: support@cargocat.app.