Safety and privacy

Utilities touch your files. Here is how ours behave.

Utilities that handle your files get close to things you care about. CozyMacApps is built by a security researcher, and these are the rules every app follows.

What we never do

What we always do

App by app

CozyZip

  • Runs in the macOS App Sandbox with no network access.
  • Never extracts path traversal entries or symlinks. This cannot be switched off.
  • Flags scripts, executables and misleading extensions before you extract.
  • Extracts to a staging area first, then moves files into place.
  • Passes archive passwords to its helper tools privately, never on the command line where other processes could read them.

This website

The site is static. It sets no advertising cookies and has no sign-up wall. We use Cloudflare Web Analytics, which counts page views without cookies and without identifying visitors.

Report a security issue

If you find a vulnerability in one of our apps, email support@cozymacapps.com. Please include steps to reproduce. We read every report.

Further reading

How zip files can hide risky files on macOS