Your data

Privacy policy

Last updated: 17 October 2026

Porpoise is a free, open-source file manager for macOS. This policy explains how the app and this website handle data, including information received from Google when you connect a Google account.

The short version

Porpoise runs on your Mac. We do not operate an app server and do not receive your files, Google account data or usage information. The app has no analytics, tracking, advertising or automatic crash reporting.

Google account permissions

Connecting Google Drive is optional. When you connect, Porpoise asks for:

• Your email address, name and profile picture (openid, email, profile), to identify connected accounts.
• Access to see, edit, create and delete your Google Drive files (drive), to browse, open, preview, download, upload, copy, move, rename and trash files and folders, view sharing information, and keep selected files and folders downloaded.

Porpoise needs access across your Drive so you can navigate existing folders and work with files created outside Porpoise. It uses this access for the features you choose in the app, including checking for changes to downloaded folders.

Where Google data goes

Your Mac connects directly to Google's sign-in and API servers and Google's image servers for thumbnails and account pictures. Google data is not routed through us. We do not sell, rent or disclose it, use it for advertising, creditworthiness or lending, or use it to train AI models.

When you open a file in another app, Porpoise gives that app a local copy at your request. Files you upload or changes you make in Drive are sent to Google. Opening Google Docs, Sheets or Slides opens Google's website in your browser.

What stays on your Mac

• Persistent sign-in credentials are stored in the macOS Keychain. Tokens are used in memory to authenticate requests; they are not saved in ordinary settings or logs.
• Your account ID, email, display name and picture address are stored in Porpoise's settings.
• File and folder metadata, previews, downloaded files, edit copies and transfer recovery information are stored under ~/Library/Application Support/Porpoise. Offline store folders are restricted to your user account and excluded from backup.
• Profile pictures are cached under ~/Library/Caches/Porpoise.

These local copies support browsing, previews, offline access, editing and interrupted transfers. They may remain on your Mac until removed or cleared; uninstalling the app alone does not erase its support folders or Keychain credentials.

Limited Use

Porpoise's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing data and access

• Use Remove Download to remove a downloaded file or folder from this Mac. Files you separately saved elsewhere are unaffected.
• Disconnect in Settings › Accounts removes the connected account and its Keychain credential and clears its offline store and browsing/preview caches. Porpoise attempts to revoke Google's authorization; if that fails, you can revoke access directly at Google. Disconnect is blocked while unsent edits need your attention.
• You can revoke authorization at any time in your Google account's third-party connections.
• Some edit and transfer recovery records can remain in the support folder after disconnect. To remove all remaining local app data, quit Porpoise and remove its Application Support and Caches folders. Save any needed edits or recovery files first. Files you saved to other folders remain there.

Other connections you choose

The app's built-in update checks contact GitHub and its download infrastructure. Automatic checks can be disabled in Settings › General. Requests expose normal connection information, such as your IP address, to GitHub. Google data is not sent with update requests.

If you ask Porpoise to install Android platform tools, it downloads them from Google. Remote locations such as SFTP, FTP, SMB and WebDAV connect to servers you configure; their operators receive the requests and files needed for your actions. Saved passwords are held in your Keychain. Opening links or using the built-in terminal can contact destinations you choose.

This website

This static site is hosted by GitHub Pages. It uses Google Fonts, so your browser contacts Google to load fonts. The homepage requests the latest release number from GitHub. These providers receive ordinary web request information, including your IP address. We add no analytics, advertising, tracking cookies or external scripts.

See GitHub's privacy statement and Google's privacy policy for their handling of these requests.

Security, children and changes

Google connections use HTTPS. Sign-in uses the desktop OAuth flow with a local loopback redirect and PKCE. Porpoise is a general-purpose tool and is not directed at children under 13.

We will update this page and its date when data handling changes. Its history is available in the source repository.

Contact

For privacy questions, contact the project on GitHub. Do not include private files or credentials in public issues. Report security concerns through the security policy.