Privacy, explained plainly.

Burrow is a local-first macOS storage doctor. This policy describes what stays on your Mac, how confirmed cleanup works, and what Apple processes when you purchase Burrow Pro.

Effective July 26, 2026

Burrow Privacy Policy

The short version: scanning, risk classification, and explanations happen on your Mac. Burrow does not upload file contents or scan facts to a third-party analysis service. Cleanup always requires your explicit confirmation.

1. Information processed on your Mac

To analyze storage and prepare a cleanup plan, Burrow processes filesystem facts such as file and directory paths, sizes, basic metadata, scan issues, selected scan locations, deterministic risk classifications, and the cleanup actions you review.

Burrow stores app settings locally. It may also store local cleanup history, workflow audit records, and rules for items you chose to keep. These records help make cleanup reviewable and auditable.

2. Read-only scanning and cleanup

Scanning is read-only. Burrow does not send file contents to Burrow-operated servers for scanning or classification. A cleanup action is prepared only after local classification and your selection. Burrow moves confirmed eligible files to the macOS Trash, or runs an explicitly listed allowlisted action, only after final confirmation. Buying Burrow Pro never starts cleanup.

3. Local explanations

Paths, sizes, categories, risk labels, evidence, and explanations stay on your Mac and are not sent to a third-party analysis service. Explanations are generated from local deterministic rules and measured facts.

4. Purchases

Burrow Pro is a one-time in-app purchase handled by Apple through the App Store and StoreKit. Apple processes payment information. Burrow receives product and entitlement information needed to unlock Pro; it does not receive your full payment-card details.

5. Permissions

The Mac App Store version runs in the App Sandbox. You choose a Home or other folder through the macOS file picker before Burrow can inspect that scope. Burrow stores this authorization as a security-scoped bookmark so it can restore access on later launches. Full Disk Access is a separate optional macOS privacy permission and does not replace App Sandbox folder selection. Missing access is shown as incomplete coverage; it is never bypassed.

6. Analytics, advertising, and tracking

The Burrow app contains no advertising SDK and no third-party analytics or cross-app tracking SDK. The app does not sell personal information.

7. Website hosting

This website is hosted on Cloudflare Pages. When you visit it, Cloudflare may process ordinary request information such as IP address, browser details, and security logs to deliver and protect the site under Cloudflare’s own privacy policy.

8. Retention and your choices

Local settings, security-scoped folder bookmarks, and records remain on your Mac until you remove them or uninstall the app and its data. You can remove an authorized folder in Settings. Files moved to Trash remain subject to your macOS Trash settings. You can decline Full Disk Access and cancel any cleanup before final confirmation.

9. Children

Burrow is a developer utility and is not directed to children. We do not knowingly use the app to collect personal information from children.

10. Changes and contact

We may update this policy when Burrow’s features or legal obligations change. The effective date above identifies the current version. For privacy questions, email [email protected].

Burrow 隐私政策

简要说明:扫描、风险分类和解释都在你的 Mac 上完成。Burrow 不会把文件内容或扫描事实上传到第三方分析服务。任何清理都需要你明确确认。

1. 在 Mac 本地处理的信息

为了分析存储占用并生成清理计划,Burrow 会在本地处理文件与目录路径、大小、基础元数据、扫描问题、你选择的扫描位置、本地确定性风险分类,以及供你复查的清理操作。

Burrow 会在本地保存应用设置,也可能保存清理历史、工作流审计记录,以及你设为“保留”的项目规则。这些记录用于让清理过程可复查、可审计。

2. 只读扫描与清理

扫描过程只读。Burrow 不会为了扫描或分类把文件内容发送到 Burrow 运营的服务器。只有经过本地分类、由你选择的项目才会进入清理计划。最终确认后,Burrow 才会把符合资格的文件移入 macOS 废纸篓,或执行确认页明确列出的白名单操作。购买 Burrow Pro 绝不会自动开始清理。

3. 本地解释

路径、大小、分类、风险标签、证据和解释都留在你的 Mac 上,不会发送给第三方分析服务。所有说明均由本地确定性规则和测量事实生成。

4. 购买

Burrow Pro 是由 Apple 通过 App Store 和 StoreKit 处理的一次性 App 内购买。付款信息由 Apple 处理;Burrow 只接收解锁 Pro 所需的商品和权益信息,不会收到你的完整银行卡信息。

5. 系统权限

“完全磁盘访问权限”为可选权限,用于扩大 macOS 允许 Burrow 检查的目录范围。Burrow 只会把该权限用于上述存储工作流。缺少权限时会如实显示覆盖不完整,不会绕过系统限制。

6. 分析、广告与跟踪

Burrow App 不包含广告 SDK,也不包含第三方分析或跨 App 跟踪 SDK,不出售个人信息。

7. 网站托管

本网站托管在 Cloudflare Pages。访问网站时,Cloudflare 可能会按照其隐私政策处理 IP 地址、浏览器信息和安全日志等常规请求信息,用于提供并保护网站。

8. 保留期限与你的选择

本地设置与记录会保留在你的 Mac 上,直到你将其删除,或卸载 App 并移除其数据。移入废纸篓的文件遵循 macOS 的废纸篓设置。你可以拒绝完全磁盘访问权限,也可以在最终确认前取消任何清理。

9. 儿童隐私

Burrow 是面向开发者的工具,不以儿童为目标用户。我们不会通过本 App 故意收集儿童的个人信息。

10. 政策变更与联系

当 Burrow 功能或法律义务发生变化时,我们可能更新本政策。页面顶部的生效日期标识当前版本。如有隐私问题,请发送邮件至 [email protected]