Privacy
Last updated September 8, 2026
Kokos is a local file manager. It has no accounts, no analytics, no telemetry and no cloud. This page lists every case where the app or this website talks to a server, and what is sent.
What the app sends
| When | Where | What |
|---|---|---|
| You enter a license key, and once every 30 days after that | Gumroad (api.gumroad.com) | Your license key. Gumroad answers whether it is valid. Kokos keeps only the key, in your macOS Keychain. |
| Update check, on launch and about once a day if enabled | GitHub Pages (yarikbright.github.io) | A request for the update feed. Like any web request it carries your IP address and the Kokos and macOS versions. System profile reporting is turned off. |
| Update download | GitHub Releases | The new version of the app. Same as above. |
That is the whole list. Nothing about your files, folder names, searches, or how you use the app ever leaves your Mac. You can turn off automatic update checks in Settings → Updates.
What stays on your Mac
- Your tabs, pinned folders, view settings and the shelf, in
~/Library/Application Support/Kokos. - Folder colors and glyphs, stored as an extended attribute on the folder itself, so Finder can show them too.
- An action log and copies of crash reports, in the same folder under
Diagnostics. Nothing uploads them. If you report a bug we may ask you to attach one by hand. - Thumbnails and Quick Look previews, generated by macOS on your Mac.
Deleting the app and that folder removes everything Kokos ever stored.
Purchases
Licenses are sold through Gumroad. Gumroad processes the payment, issues the receipt and the license key, and handles taxes. We never see your card details. We do see what Gumroad shows every seller: the email address you used, the country, the price paid and the license key. We use it only to help with support and refunds, and we do not add you to any mailing list. Gumroad's own privacy policy covers the checkout.
This website
The site sets no cookies and runs no analytics. Your light or dark theme choice is kept in your browser's local storage and never sent anywhere. The site is hosted on Vercel, which, like any host, sees the IP address of each request in its server logs.
Your rights
Under the GDPR you can ask what we hold about you, have it corrected or deleted, or object to its use. In practice that is your Gumroad purchase record. Email hi@getkokos.com and we will answer within 30 days. You can also complain to your local data protection authority.
Changes
If Kokos ever starts sending anything new, this page and the release notes for that version will say so before the change ships.