MyLocalMyLocal Privacy Policy
Effective date: November 1, 2026
This policy explains how MyIAM Inc. (the "Company") handles your information in MyLocal and on its website.
1. What is sent to the Company
MyLocal has no account or sign-in, and sends no information to the Company or third parties for usage statistics, analytics, advertising or error reports. Apart from the update check and the support information check below, everything MyLocal handles is processed and stored only on your Mac.
Update check: once a day, and when you choose "Check for updates", MyLocal downloads the update information file the Company publishes on GitHub Releases (GitHub, Inc.) to see whether a new version is out, and installing an update downloads the update from the same place. GitHub handles these requests, so like any web server it may log the IP address and time of the request, under GitHub's privacy statement. The Company does not receive these logs. Processes, servers, settings and the activity log are never sent. You can turn the automatic check off in General > Updates.
Support information check: once an hour, and when you press "Check Now", MyLocal checks whether there is new data in the support information and security advisory files the Company publishes on GitHub Releases (GitHub, Inc.), with the end-of-support dates, latest versions and known security advisories of server software. The check does not receive the files' content; the whole files are downloaded only when there is new data. They are compared only on your Mac, so which programs you use is not sent. GitHub handles these requests too, so it may log the IP address and time of the request; the Company does not receive these logs. You can turn off the automatic check in General > Support information; MyLocal then uses the data inside the app or already downloaded.
2. What MyLocal reads on your Mac
To find and clean up development servers, MyLocal reads:
- running processes: name, process ID (PID), user, the paths of the executable and the working folder, command line, start time and parent process;
- open network ports and the addresses they accept connections on;
- launchd services, and Docker containers' names, images, published ports, labels (such as the Compose project) and restart policies;
- the names and process numbers of apps that pm2 and supervisord run, asked over the sockets those programs open on this Mac; the environment variables that come with the answer are discarded, not saved or sent, and their settings files are not read;
- app icons, to show them on screen;
- processes' and Docker containers' memory and CPU usage, read only while the app's Processes screen is open or when you ask the command line tool for it, to show it there; it is never saved to a file;
- server programs' versions, from the paths of executables and command lines, version files beside an executable (a JDK's release file, package.json, Python package folders, an app's Info.plist), container images' tags, labels and settings whose names end in _VERSION, and the command lines running inside containers with the version information of their executables, jars and JDKs (files are copied out through Docker; nothing is run inside a container). These are read only while the app's popover or Processes screen is open or when you ask the command line tool for them, to show them there; they are never saved to a file or sent anywhere. Files in Documents, Desktop, Downloads, iCloud and external volumes are not read. Whether a version is still supported is judged on your Mac, from data inside the app or downloaded.
- tunnels: the ports that tunnel programs (ngrok, cloudflared, localtunnel, ssh, Tailscale's Serve and Funnel) forward and their addresses, from their command lines, the local APIs those programs open on your Mac, and the status output of the command line tool inside the Tailscale app. These are only shown in the app and the command line tool; they are never saved to a file or sent anywhere. Tunnel programs' settings files are not read.
Values in command lines that look like passwords or tokens are masked before they are stored, shown, copied or exported (the one exception is --raw in section 4). Processes' environment variables are not read.
3. What MyLocal stores, and for how long
| Stored | Where | Kept |
|---|---|---|
| Settings (work hours, rules, language and so on) | ~/Library/Application Support/MyLocal/config.toml | Until you delete it |
| Activity log (cleanups, warnings, snoozes, the servers involved, when the background component started and stopped, and what put the Mac to sleep) | ~/Library/Application Support/MyLocal/journal.jsonl | Removed after the period you set (90 days by default). You can also delete it at once in General > Records |
| Downloaded support information and advisories (end-of-support dates, latest versions and known advisories of server software, and the address of the data last downloaded; nothing about you) | ~/Library/Application Support/MyLocal/support.json, advisories.json, support-release.txt | Replaced when a new file is downloaded |
| The state of a cleanup in progress | ~/Library/Application Support/MyLocal/state.json | Overwritten as the state changes |
| The background component's run log | ~/Library/Logs/MyLocal/ | Starts over past 1 MB, keeping only the file before |
| When the background component was last running (only the file's modification time; it is empty) | ~/Library/Application Support/MyLocal/mylocald.alive | Overwritten continually |
| That the first-run guide was put off ("Later") | ~/Library/Application Support/MyLocal/onboarding-later | Until the guide is finished or the settings folder is removed |
| The main window's position and size | ~/Library/Application Support/MyLocal/main-window.json | Overwritten when the window closes or the app quits |
| App window data (a copy of the language, theme and zoom level for windows to use at once) | ~/Library/WebKit/io.myiam.mylocal/, ~/Library/Caches/io.myiam.mylocal/ | Until you remove it |
| App icon images | ~/Library/Caches/MyLocal/ | Until the app starts after they are 30 days old (or until macOS clears its caches, if sooner) |
Deleting MyLocal and then these folders removes everything MyLocal stored.
4. What you export yourself
When you export the activity log or copy the diagnostics, their contents go to the file you choose or to the clipboard. Whether to send them to anyone is up to you. Secrets are masked in them too. The diagnostics include your macOS version, and your home folder's path reads ~ so that your user name does not show.
When you write what the command line tool collects to a file (mylocal ls --dump-snapshot), it goes to the file you name. Secrets are masked there too, unless you add --raw, which writes them as they are. The file is made readable by you only.
5. Notifications
MyLocal shows upcoming cleanups and their results as macOS notifications. They include server names and the like; macOS displays them and may keep them in Notification Center. You can turn them off in System Settings.
6. The website
The Company's website (https://mylocal.myiam.io) uses Google Analytics to count visits. It uses no advertising tools. The app (MyLocal) has no Google Analytics.
- What is collected: the pages you visit, where you came from, browser and device type, screen size, approximate location (country and city), scrolling, link clicks and file downloads, and a cookie identifier that tells visitors apart.
- Why: to learn how many people visit and what they read, so the website can be improved.
- Cookies: cookies starting with _ga, on the website's address (mylocal.myiam.io) only. Ad personalization and Google signals are off.
- Transfer abroad: this information is sent over the internet during your visit to Google LLC (United States), stored on Google's servers and kept for 14 months. Google takes privacy questions at https://support.google.com/policies.
- Consent and refusal: visiting from the European Economic Area, the United Kingdom or Switzerland, Google Analytics is not loaded and nothing is collected until you choose "Accept". Your region is judged from your browser's time zone, which stays in the browser and is not sent; an unknown time zone or UTC is treated the same way. If your browser's time zone differs from where you are, the result can differ too. Elsewhere it is collected from your first visit, and you can stop it at any time with "Decline" in the notice or "Cookie settings" at the bottom of the website. Declining stops Google Analytics from loading and removes the cookies already set. You can also block cookies in your browser; declining does not limit your use of the website.
The language and theme you pick, whether you paused animations and whether you accepted cookies are stored only in your browser. The website is served through Amazon Web Services (CloudFront), and the app is downloaded from GitHub Releases. Like any web server, these services may handle the IP address and time of each request, under their own privacy policies.
7. Changes to this policy
When this policy changes, the effective date and the changes are announced in the app or on a website the Company designates at least 7 days before they take effect. If a feature other than the update check and the support information check that sends information to the Company or a third party is ever added, you will be told and asked for consent before it is used.
8. Contact
MyIAM Inc. · contact@myiam.io
We take feedback and problem reports in the public GitHub (GitHub, Inc.) repository https://github.com/my-locals/mylocal. "Send feedback" and "Report a problem" in the app only open this repository in your browser; the app sends no content. The address of "Report a problem" carries only the app's version. What you post there can be seen by anyone along with your GitHub account name and is subject to GitHub's privacy policy, so please check that it is fine to make public before you post.
If you write to us by email, we use your address and message to reply.