Privacy Policy

What this means

No data collection.

No personal information, no usage statistics, no analytics in the app.

No tracking.

Nothing records how you use the app or which folders you clean.

No network access, at all.

BloatBuster ships without the macOS network entitlement. It is not that we choose not to phone home — the app is not permitted to open a network connection in the first place.

No third-party services.

No third-party analytics, no crash reporting, no advertising SDKs in the app.

No account required.

There is nowhere to sign in, and nothing to sign in to.

How BloatBuster works

BloatBuster is a local utility that runs entirely on your Mac. It scans folders you drag into the app to identify development artifacts like node_modules, target, .gradle and other build directories. All scanning and cleaning happens on your device.

File access

BloatBuster only accesses folders you explicitly give it — by dragging them in, or by choosing them from the open panel. It never goes looking on its own, and it only scans for known development artifact patterns. Your source code and personal files are never modified.

When you scan a folder, BloatBuster saves that permission so the folder appears under "Recent" and you don't have to grant access again every time you open the app. macOS calls this a security-scoped bookmark. It grants access to that one folder and nothing else, it stays on your Mac, and you can revoke it at any time by removing the workspace in BloatBuster's Settings.

Data storage

Everything BloatBuster stores is stored locally, on your Mac, in standard macOS preferences. Specifically:

• Your recent workspaces — the name and path of each folder you've scanned, and the macOS permission that lets BloatBuster reopen it
• Your scan exclusion rules — the folder patterns you've told it to skip
• How much space you've reclaimed, so the app can show you a running total

None of it is ever transmitted anywhere. There is no account, no server, and no copy of any of this off your machine.

macOS permissions

BloatBuster requests exactly one:

It does not ask for Full Disk Access and does not need it. The app is sandboxed, so these permissions are enforced by macOS rather than by us.

Don't take our word for it

A privacy policy is just a promise. This one is checkable. Every macOS app declares the capabilities it is allowed to use, and you can read BloatBuster's for yourself:

You will not find com.apple.security.network.client in the output, because it isn't there. Without it, macOS will not let the app reach the network, whatever its code says and whatever we claim on this page. That is privacy by technical design rather than by policy.

The Send Feedback item does not change that list. It is worth being precise about what it does: the app hands your browser a web address and stops. It cannot post, and the command above is still how you confirm it.

Feedback form

The app collects nothing; this website has one page that does — the feedback form, and only when you choose to fill it in and press send.

We receive what you typed — the subject and the details — and your email address if you chose to give one. The address is optional; leave it blank and the report is anonymous, and we will still read it.

Choosing Send Feedback in the app fills in four technical facts: your BloatBuster version, your macOS version, your Mac's model identifier, and your language. They arrive in the web address itself, so you can read them in your browser's address bar before you press anything, and the form shows them as ordinary editable fields you can change or clear. Four facts, no identifier, and nothing about your files.

Submissions are stored in a Cloudflare D1 database hosted in Western Europe and emailed to support@mgcrea.io so we can reply. We keep them for twelve months, then delete them. Never used for marketing, never sold, never shared. The form sets no cookie, and nothing in the code that handles your submission ever reads or stores your IP address. Like every page here it loads the site-wide visitor statistics described below.

Website analytics

This website is separate from the app, and it does count visits. It uses Cloudflare Web Analytics, which sets no cookie and stores nothing on your device — no identifier between page loads, no localStorage, and no fingerprinting of your browser or IP address. A visit is counted by looking at whether the page you came from was on this site, not by recognising you. Because nothing is written to or read from your device, this needs no consent banner under the ePrivacy Directive (in France, Article 82 of the loi Informatique et Libertés), and there is none.

Sent on each page view: the page address, the address you came from, your browser and operating system, your screen size, and page load timings. Cloudflare derives an approximate country from your IP address and does not pass the address itself to us. We see aggregate totals only — never a profile, never an individual, and never anything across other websites. Our lawful basis is legitimate interest in understanding how our own site is used; Cloudflare acts as our processor under its Data Processing Addendum. Any content blocker, or a browser Do Not Track setting, stops the script loading.

App Store compliance

This privacy policy is designed to comply with Apple App Store requirements. BloatBuster does not collect any data that would require user consent under privacy regulations such as GDPR or CCPA.

Changes to this policy

If we ever need to change this privacy policy, we will update this page and the date at the top. Since we don't collect any contact information, we cannot notify users directly of changes. We recommend checking this page periodically if you have concerns about privacy.

Contact us

Questions about this policy, or about BloatBuster's privacy practices, go to support@mgcrea.io or through the support page.