The app
Obscura Trace runs entirely on your Mac. Your photos, their metadata, and the app’s catalog never leave your computer, and no analysis engine uses the network.
- No account, no analytics, no telemetry.
- What is read: only the drives or folders you choose yourself in the Scan Wizard. The app never browses your disk on its own initiative.
- What is stored: the catalog
~/Library/Application Support/Obscura Trace/catalog.sqlite(indexed files, checksums, metadata, groups, review decisions, sources and their bookmarks, settings, plans, transaction journal, activity history), previews in~/Library/Caches/Obscura Trace/, and, for each transfer, a manifest in the destination folder. Everything stays on your drives; the Your data chapter of the guide explains how to back it up or erase it.
The only connection: updates
Update checks go through the Sparkle component.
- Automatic checking is off by default. While it is off, the app contacts no server, unless you choose “Rechercher les mises à jour…” (Check for Updates…) in the Obscura Trace menu.
- Turned on in Settings, it reads the list of releases published on GitHub once a day, sending nothing about your photos or your catalog.
- An update that is found is never installed without your consent, and every update is checked against a cryptographic signature before it is installed.
Like any web request, a check sends GitHub your Mac’s IP address and the technical details of an HTTP request; GitHub processes them under its own privacy policy.
This website
This website sets no cookies, uses no analytics, and loads no fonts or scripts from a third-party service. Downloading the app takes you to the Obscura member area (profil.obscuraflow.app), which requires signing in.
The contact form
The contact form is the only page that sends data.
- What is sent: the fields you fill in (name, email address, topic, versions, message). They reach us by email through Resend, an email delivery service, and are not stored in any database of the website.
- What they are used for: only to reply to you. Your address is used as the reply-to address.
- Sending limit: to slow down automated submissions, the website counts messages per IP address. It does not store the address itself but its SHA-256 hash, deleted after two hours at most, at Cloudflare, which hosts the website.
The form asks for no photos and no files.