Privacy
Short, because there isn't much to say.
This website
It sets no cookies, runs no analytics, and loads nothing from other servers: no web fonts, no scripts, no tracking pixels. The home and Features pages run one small script of our own, which starts an animation when you scroll to it. It makes no requests and stores nothing. The opening animation is plain CSS. The hosting provider keeps ordinary request logs for operating the service.
The waitlist
When you join, we store your email address and the date. We don't store your IP address, your browser or where you came from. We use your address only to tell you when the Mac app is ready, and about anything that changes what we promised here.
To be removed, reply to any email we send, and we'll delete your address.
The app
The app needs no account, and has no analytics and no crash reports, and nothing connects when it starts. It doesn't check for updates yet. When it does, this page will say exactly what the check sends, before the version that adds it is released. Your library stays where you put it.
It connects to other services only when you ask it to, and only to these:
| When you | It connects to | Which sees |
|---|---|---|
| Open a link from MEGA, Proton Drive, WeTransfer, Yandex Disk or another service | That service | Your network address and which files you read, as in a browser. Proton Drive and Files.fm can also see that the request comes from Klenod. |
| Use S3 storage for your library, its second copy or shares | The S3 address you enter | Encrypted data, sizes, and when things change |
| Open a Klenod share link | Wherever the sender keeps the share | Your network address and that you opened it. The key is in the part of the link that is never sent. |
These connections are direct unless you set a proxy in Klenod's settings. The Mac's own proxy settings are ignored. With a proxy set, every connection goes through it, including looking up the services' addresses, and nothing connects if the proxy is down. Tor and SOCKS5 or HTTP proxies work. A VPN that covers the whole Mac, such as the Mullvad app, carries the traffic either way, because it works below the app. If you turn on MEGA's ready-made thumbnails in Settings, Klenod also fetches them from MEGA's thumbnail servers, over an older kind of encrypted connection. Video conversion, the built-in player and the search helper run with network access turned off. macOS itself may check the app's signature with Apple when you open it. That check comes from the operating system.