Privacy Policy
Archivist Sort · Centennial Defense Systems · effective on publication
The short version: Archivist Sort runs on your Mac and your data stays there. No accounts, no telemetry, no analytics, no crash uploads, no license phone-home, and nothing you scan is ever sent to us or anyone else.
What the app processes — locally only
Normal use scans folders or drives you select and writes local artifacts needed for review, planning, execution, and rollback. The app may read:
- File and folder paths inside the scan root you selected.
- File metadata: size, extension, timestamps, and media metadata where supported.
- File bytes when a scan mode or confirmation step requires hashing or fingerprinting.
- Review decisions you record.
- Plan and journal data required for quarantine and rollback.
The app may write: local scan databases; summary, stats, and report files; plan files; execution and rollback journals; and quarantine folders inside the selected volume tree when you approve execution. All of it stays on your machine.
Network use
In this version there is:
- No telemetry and no analytics.
- No crash uploader.
- No license phone-home.
- No automatic update network calls.
- No upload of your file contents, ever.
One documented exception, local and opt-in: if you enable the optional AI-assist feature, the app talks only to a model server running on your own machine (loopback). A remote address is rejected before any connection is made. Disabled by default; nothing about your files leaves the machine either way.
Apple's notarization validated the app binary with Apple before distribution. That is a property of the download artifact — the app does not contact Apple with your files during use.
Sensitive paths
Archivist Sort identifies protected classes — keys, certificates, git metadata, SSH and GnuPG material, and configured sacred paths — so it can refuse to move them. Those paths may appear in your local reports and journals because the product needs to explain what it protected. That information stays local like everything else.
Your control
You choose what to scan. Files are not moved unless a plan is generated from your recorded review decisions and you approve execution. Local artifacts remain on your Mac or selected drive until you delete them. There is no remote account and no hosted retention system.
Support data
Support requests should never include private archives, secret keys, passwords, tokens, or drive dumps. We may ask for screenshots, logs, or reports with private paths redacted.
Changes
If a future version changes any of the above — for example an optional update checker — the change will be documented here and in the release notes before it ships, and anything involving your data leaving the machine would be opt-in.