Privacy Policy

Effective date: 2026-08-02 App: Wavepocket (macOS) Developer: Matt Sandy

Summary

Wavepocket does not collect, store, transmit, or share any data about you or your files. Everything the app does happens locally on your Mac. There is no account, no telemetry, no analytics, no advertising, and no network activity of any kind. This page explains that in more detail.

Data Wavepocket collects

None.

Specifically:

• Files you open: parsed and processed entirely in memory on your Mac. They are never copied, uploaded, or transmitted off-device.
• Personal information: not requested, not collected, not stored.
• Usage analytics: none. The app does not record what you do.
• Diagnostics / crash reports: only the system-level reports macOS itself generates if you have "Share with App Developers" enabled in System Settings → Privacy & Security → Analytics & Improvements. Those go to Apple, not to us. Wavepocket ships no SDKs that capture diagnostics.
• Identifiers: no advertising ID, no device ID, no install ID, no user ID. The app does not call any identifier API.
• Cookies / local storage: the embedded WKWebView is loaded from a custom local scheme (wavepocket://). No persistent cookies or web storage are written by the app's code.

Network use

None.

Wavepocket is built to be incapable of contacting the internet:

1. The macOS sandbox restricts file access to files you explicitly open or drop into the app (com.apple.security.files.user-selected.read-only).
2. App Transport Security is configured to disallow all loads (NSAllowsArbitraryLoads = false, NSAllowsLocalNetworking = false).
3. A WKContentRuleList inside the embedded web view blocks every http, https, ws, wss, and ftp URL at the WebKit layer.
4. The only entitlement that touches the network (com.apple.security.network.client) is required by macOS for the WKWebView helper process to launch at all; it is not used to make any network request.

If you would like to verify any of this, the source code is available at the URL listed under Contact below.

Third-party services

Wavepocket integrates with no third-party services. It uses open-source software to render the UI, all of which runs locally inside the app. The full acknowledgements list is shown in the Wavepocket → About Wavepocket menu.

Children

Wavepocket does not collect data from anyone, including children. It is suitable for all ages.

Your rights

Because Wavepocket collects no personal data, there is no data to request, correct, export, or delete. GDPR, CCPA, and similar requests are satisfied trivially: we hold nothing about you.

Changes to this policy

If this policy ever changes, the new version will be posted here with an updated Effective date. Material changes will also be noted in the What's New text of the corresponding App Store update.

Contact

For questions about this policy or the app:

• Email: [email protected]
• Website: https://matt.sandy.ms

This policy is written in plain English on purpose. If anything is unclear, please email and I'll fix it.