Safety and privacy
Utilities touch your files. Here is how ours behave.
Utilities that handle your files get close to things you care about. CozyMacApps is built by a security researcher, and these are the rules every app follows.
What we never do
- No tracking or telemetry. The apps do not report what you open, scan or remove.
- No accounts. You can download and use the apps without giving us an email address.
- No uploads. Your files are read on your Mac and stay there.
- No scare tactics. No fake warnings, no countdowns, no "your Mac is at risk".
What we always do
- Show before acting. You see what will be extracted or removed, with a plain explanation, before anything happens.
- Ask for narrow access. Apps request the folders they need and explain why when macOS asks for permission.
- Prefer reversible actions. Where something is removed, it goes to the Trash rather than being deleted outright.
- Describe ourselves accurately. None of our apps is an antivirus, and none claims to be.
App by app
- Runs in the macOS App Sandbox with no network access.
- Never extracts path traversal entries or symlinks. This cannot be switched off.
- Flags scripts, executables and misleading extensions before you extract.
- Extracts to a staging area first, then moves files into place.
- Passes archive passwords to its helper tools privately, never on the command line where other processes could read them.
This website
The site is static. It sets no advertising cookies and has no sign-up wall. We use Cloudflare Web Analytics, which counts page views without cookies and without identifying visitors.
Report a security issue
If you find a vulnerability in one of our apps, email support@cozymacapps.com. Please include steps to reproduce. We read every report.
Further reading
How zip files can hide risky files on macOS