Release Preflight inspects only the local files and folders you choose. Source code and file contents are processed on your Mac and are never uploaded by the app. There is no account, advertising, analytics, tracking, or telemetry.
Optional dependency vulnerability lookup is OFF by default. When enabled, the app sends package ecosystem, name, and exact version to OSV at api.osv.dev. OSV pagination tokens may be sent to complete a lookup. Source files, filenames, repository URLs and account identifiers are not sent. As with any internet connection, OSV and its service infrastructure receive your IP address and operational request metadata; their own policies apply. We do not operate this endpoint and cannot control its server logs. Keep lookup OFF if you do not want this communication.
Scans and per-scan ignores are held in memory. The app does not save scan history or modify inspected content. Reports are written only to the destination you select. Reports contain the selected target name, relative paths, dependency inventory, and masked findings; review them before sharing.
Reference links open in your web browser only when you choose them. Those websites operate independently. This website uses GitHub Pages without added analytics or cookies. GitHub and Apple operate their services under their own privacy policies.
If you contact support, we use the information you provide to respond to your request. Do not send source code, credentials, private keys, or confidential reports.
Google Privacy Policy · GitHub Privacy Statement
yutchi.apps@gmail.com
Package names may reveal private projects or internal dependencies. Leave lookup OFF for confidential dependencies unless you are authorized to send these names to OSV.