Carriel 한국어 Download
Menu

Privacy

What leaves this Mac

Every service Carriel can reach, why, and the hosts it may contact. This page is built from the list the app itself reads, so neither can gain or lose a line without the other.

Declaration · What leaves this Mac4 services

  1. iCloud*.icloud.com · *.icloud-content.com · *.apple-cloudkit.com

    Apple’s frameworks connect

    Your pouch is kept in your own iCloud: CloudKit’s private database and iCloud Keychain. Every thing is encrypted on this Mac first, its name included, so no value, name or note leaves it unencrypted. Apple sees how many records there are, their sizes and when they change.

    When off This Mac isn’t signed in to iCloud, so your pouch stays on this Mac.

  2. Updatesdl.carriel.dev

    A tool Carriel starts connectsA setting turns it off

    About once a day, and whenever you choose Check Now, Carriel Updater, a small helper Carriel starts, asks dl.carriel.dev whether there is a newer Carriel and downloads it from there. The request holds the version you run and nothing unique to this Mac. Every update is signed by LonelyDuck and notarized by Apple, and Carriel checks both before installing it.

    When off Update checks are off: Carriel Updater asks dl.carriel.dev only when you choose Check Now.

  3. Your licenseapi.lonelyduck.io

    A tool Carriel starts connects

    Only with the bigger pouch. When the license reaches a Mac, Carriel Updater sends api.lonelyduck.io the license, an id made for this Mac and this license, the Mac’s model (like “MacBook Air · M2”, never its name), a public key and a signature, and brings back this Mac’s 30-day lease. About twice a week after that, each Mac sends only the id LonelyDuck gave it and a signature. Macs… sends the license, and Release the license and the Mac it releases. Nothing from your pouch goes with any of them.

    When off Carriel without the bigger pouch never contacts api.lonelyduck.io. Once a license reaches a Mac, Carriel Updater checks it there, then about twice a week from each Mac that uses it.

Nothing else to declare.

Nothing else leaves this Mac. Carriel sends no usage data, no analytics and no crash reports of its own, and has no server of its own that learns what you keep in it.

This website

This website, the downloads, and buying the bigger pouch

carriel.app runs no script, sets no cookies and has no analytics.

  • One line per request. The server writes one access-log line for each request: your IP address, the time, the address asked for, and the request’s headers, such as your browser’s User-Agent.
  • About 8 days. Each line is kept at most about 8 days, then deleted.
  • Downloads and update checks. dl.carriel.dev, where Carriel and its updates come from, writes the same kind of line for each download or update check, and keeps it as long.
  • Buying the bigger pouch. LonelyDuck Software sells it at lonelyduck.io. Its checkout opens in your browser, asks for an email address for the receipt and your license, and takes the payment by card under LonelyDuck’s privacy policy. Carriel never sees your card.