Privacy

Shoo

Shoo works entirely on your Mac. It makes no network connections, and it has no analytics, no crash reporting and no third-party code.

Goes online

Never. Shoo has no code that connects to the internet or to anything else on your network.

Reads

The names, sizes and dates of files, to map your disk and find what apps leave behind. It never opens your mail, messages or photos, or your documents apart from the AI instruction files below.

To tell which app a file belongs to, it reads each app’s bundle identifiers, code signature, launch agents, installer receipts and recent crash reports.

To find what AI tools leave behind, it reads the tools’ own records, your chat transcripts included, for the folders and files each session used, and opens their chat databases read-only. In folders that aren’t projects, it reads AI instruction files such as CLAUDE.md and AGENTS.md to check whether the files they mention still exist.

All of this is read on your Mac, and none of it is kept or sent anywhere.

Activity

Reads the counters macOS keeps for each app, such as processor and memory use. The graphs show the last two minutes, and none of it is saved.

Keeps

History: where each item in your last 200 cleanups came from, so Shoo can put it back. It’s one file on your Mac, ~/Library/Application Support/Shoo/History.json.

Your settings, such as what the menu bar shows, in Shoo’s preferences.

Permissions

All optional. Support explains what each one does.

Weir

Weir shows and changes your NextDNS settings, so it talks to NextDNS. The only other server it talks to is Apple’s, for the map. It has no analytics, no crash reporting and no third-party code.

api.nextdns.io

NextDNS’s API, with your API key. Weir reads your profiles, logs and statistics from it, and sends it the changes you make.

test.nextdns.io

Asked without your key when Weir connects or refreshes, and when you use Setup or Something broke?, to check whether this Mac uses NextDNS and through which profile. Setup, Flow and Something broke? use the answer.

Apple Maps

Flow’s map is drawn by Apple’s MapKit, which loads the map from Apple.

Your API key

Kept in your login keychain. Weir sends it only to api.nextdns.io, and deletes it when you sign out in Settings › Account.

Keeps

Your settings, such as what the menu bar shows and whether sounds play, and any domain you allowed for 15 minutes, so Weir can block it again.

Two files in its temporary folder: the configuration profile Setup makes, which holds your profile’s ID and name and this Mac’s name, and your Wrapped posters as pictures, for sharing.

No copy of your logs. Weir asks NextDNS each time, and its connections keep no cache or cookies on disk.

Location

Weir never asks for it. Flow puts home where NextDNS’s statistics locate your busiest IP address, passing over mobile networks when there’s another, and uses your Mac’s time zone when they have no location.

Notifications

Weir asks once, the first time you allow something for a while, so it can tell you when it blocks it again.

Files

Weir runs in the App Sandbox. Apart from the network, it can only reach files you pick yourself, such as where to save a Wrapped poster.

Links such as my.nextdns.io open in your browser, and so does a log download.

If you use Setup, Weir makes a DNS-over-HTTPS configuration profile and opens it in System Settings for you to install. The profile sends this Mac’s DNS queries to NextDNS with this Mac’s name in the address, so NextDNS’s logs can tell it apart from your other devices.

What NextDNS keeps, such as how long it keeps your logs, depends on your NextDNS settings and NextDNS’s own privacy policy. Weir is an independent app and isn’t made by NextDNS.

This website

noiro.dev has no analytics, no cookies and no ads, and it loads nothing from other servers. It uses your device’s own fonts, and every script, image and map comes from noiro.dev itself.

In your browser

If you choose Light or Dark in the noiro menu, your browser remembers that choice. What’s in the site’s Trash, and whether the desktop tip has shown, last until you close the tab. None of it is sent anywhere.

The demos

They run in your browser, on sample data. Weir’s map here guesses home from your time zone. A domain you send across it from Spotlight travels in the part of the address after #, which browsers don’t send to servers.

Server logs

Cloudflare hosts this site. Its servers receive your IP address and the name of your browser with each request, as every web server does, and Cloudflare’s privacy policy covers what it does with them. I don’t use them for anything.

Email

If you write to email@noiro.dev, I use your address and what you wrote only to reply to you.

If you ask to hear when Shoo or Weir is out, I write to you once, when it is. Your address doesn’t go on a mailing list, and I don’t share it with anyone. Ask, and I’ll send you a copy of what I have, or delete your emails.

If you think I’ve mishandled your data, you can complain to the Information Commissioner’s Office.