Privacy policy

Last updated: September 13, 2026

StorePreflight is a macOS app that analyses a local project. The controller for this website and for support correspondence is Jan Konieczny, contact: hello@storepreflight.app.

The short version

The app has no account system, no telemetry and no analytics. It does not send your project anywhere. Everything it produces stays on your Mac. I receive nothing about your app unless you email it to me yourself.

What stays on your Mac

• Project library. Folder bookmarks, the optional selected property list, your feature profile, the App Store Connect app and version you picked, plus the history of scans, your notes and your manual assessment.
• Reports. Findings, evidence with relative paths and SHA-256 values, and counters. Reports are written to the app container and are only exported when you ask for it.
• Console. The event log of the current session lives in memory and is not part of any report. In Debug builds, App Store Connect events are also written to a rotated file inside the app container.

Nothing in that list is uploaded. A full report can contain file names and your own notes, so treat it as private data. For public bug reports use the diagnostic export, which keeps only known check identifiers and statuses.

Your App Store Connect key

If you connect App Store Connect, the .p8 API key you choose - together with its Key ID and, for a team key, its Issuer ID - is stored in a StorePreflight item in your macOS Keychain. It is not synced to iCloud and it is not part of any report, export or log.

The key is used locally to obtain a signed token, and the token is sent only to Apple at api.appstoreconnect.apple.com over HTTPS. Requests are read-only. Your project sources are never sent with them. Apple's own terms and privacy policy apply to that traffic. Deleting the saved key removes the local item; it does not revoke the key at Apple.

Contact details, reviewer sign-in data, keys and tokens read during a check are not copied into reports.

This website

These are static pages. There are no cookies, no analytics and no tracking scripts, and the site sends no requests to third parties. The site is hosted on Cloudflare, which processes technical connection data such as your IP address and request metadata in order to deliver and protect the pages. That processing is necessary for the legitimate interest of running a secure site.

The language switch stores your choice in your browser's local storage. It never leaves your device.

Email support

If you write to me, I process your email address and the content of the message to answer it, and I keep the correspondence only as long as the case needs. Please do not send real reports, logs or screenshots of a private project.

Your rights

For the data described above you have the right of access, rectification, erasure, restriction, portability and objection. Write to hello@storepreflight.app. If you are in the EU you can also lodge a complaint with a supervisory authority - in Poland that is the President of the Personal Data Protection Office (UODO).

Changes

If the app starts processing anything new, this page changes first and the date at the top changes with it.