Privacy

This is the policy for the version downloaded from this site. Refresh, the Mac App Store version, has its own.

The app

• No account. There is nothing to sign into.
• No telemetry. No usage data, no crash reports, no counts of what you cleaned.
• Nothing about your Mac's contents. Everything it measures, it measures on your Mac, and every file name, size and path stays there.

It needs Full Disk Access to see the folders it reports on. That permission is granted by you in System Settings, is used only to measure and to remove what you have asked it to remove, and can be withdrawn at any time — the app keeps working, with less to show you.

Removing files that are owned by the system asks for your administrator password. That prompt is macOS's own; the password is never seen by the app.

The three things that do use the network

This page used to say the app made no network call at all. That stopped being true when it gained the ability to update itself and to check a licence, and a promise that has quietly expired is worse than one that was never made. Here is exactly what each one is.

• The update check. It asks downloads.refreshyourmac.com whether a newer version exists, and sends a version number and your macOS version — no identifier, nothing about your Mac. You can turn it off in Settings, and nothing is ever downloaded or installed without you saying yes.
• The licence check. Once, when you enter a key. It goes to Lemon Squeezy, who sell the licence, and sends the key and your Mac's name — that name is how you recognise this machine later if you move the licence. With a one-time licence the app never asks again, on any Mac, and a licensed copy works with no internet at all. With ayearly licence it also asks Lemon Squeezy every few days whether the subscription is still running, sending the key and nothing else; if it cannot reach them, cleaning carries on.
• Feedback, only if you send it. After a couple of scans the app may ask what you think. Nothing leaves your Mac unless you choose an answer and press Send. Then it sends that answer, any comment you typed, your email address only if you typed one, and the app and macOS versions. It goes to a database Caddora runs on Supabase and is emailed to support@caddora.ie, so it can be read and, if you left an address, answered. You can choose Don't Ask Again, and the app never asks again.

That is the complete list. None of them carries a file name, a path, a size, or anything the scan found.

This website

• No cookies and no local storage.
• One analytics script, from Ahrefs. It counts visits to the pages of this website: which page, the site you came from, and roughly your country, browser and device. It sets no cookies, uses no local storage and does not follow you from one site to another. It runs only on this website and never in the app.
• No tracking pixels and no other third-party scripts or fonts — the typefaces are served from this domain, so loading a page tells Ahrefs, and nobody else, that you did.

The site's host, Cloudflare, keeps ordinary request logs for about a month: the IP address, the browser's name and version, the page requested and the time. They are kept for security and abuse prevention, and Caddora also reads them to count visits, downloads and presses of the Buy buttons.

When you press Buy, the requests from your connection and browser in the 24 hours before are looked up in those logs, to see which page you arrived on, or which tagged link (an address such as refreshyourmac.com/go/tiktok, which marks where a link was posted). That is done on Caddora's own computer and only the totals are kept, such as how many Buy presses came in through the blog. Nothing is linked to a name, an email address or an order. Caddora does this because it has a legitimate interest in knowing which pages and posts bring people to buy, and the logs go when Cloudflare's month is up.

The Buy buttons also tell Lemon Squeezy, who sell the licence, which page the button was on, so an order shows whether it started on the homepage or the pricing section.

If you email

Writing to support@caddora.ie means that address and whatever you write are held in a mailbox until the exchange is finished with. It is not added to any list and you will not be emailed about anything else.

Changes

1 November 2026: the website now runs Ahrefs Web Analytics to count visits. Before that it ran no script from another host. This is the website only: the app is unchanged and still sends no telemetry.

27 October 2026: the website section now describes how Buy presses are matched to the page or tagged link they came from. Before that it said the site had no analytics, which was true of scripts on the page but did not mention that the host's logs were counted.

If this ever has to change — because the app gains something that genuinely needs the network — it will say so here, and the app will ask before doing it.