What Palomino stores
Palomino writes data only to your Mac, in three places:
- App preferences — settings like filmstrip position and auto-advance, stored in macOS UserDefaults. These never leave your device.
- Session files — a
.palomino-session.jsonfile written inside each folder you open, containing the ratings, picks, rejects, and color labels you assigned. This file stays with your photos and is never transmitted anywhere. - XMP sidecar files — standard
.xmpfiles written alongside each photo, containing ratings and labels in a format compatible with Lightroom, Capture One, and other editors. These stay on your disk.
Recent folder history is also stored locally in UserDefaults so the app can show you folders you opened before.
Network activity
Palomino makes no network requests except for one: validating an in-app purchase with Apple's App Store. That transaction is handled entirely by Apple's StoreKit framework using your Apple Account credentials. Palomino does not see, store, or transmit your Apple Account information.
Apple's privacy policy governs what Apple collects during that transaction: apple.com/legal/privacy
Analytics and tracking
There are none. Palomino contains no analytics libraries, crash reporters, advertising SDKs, or telemetry of any kind. No behavioral data is collected.
Third-party services
Palomino has no third-party dependencies. Every framework it uses is from Apple (AppKit, SwiftUI, ImageIO, StoreKit, Accelerate, CoreGraphics, OSLog). No data passes through any third-party service.
Your privacy choices
Because Palomino collects no personal data and performs no tracking, there is nothing to opt out of. You can:
- Delete session files (
.palomino-session.json) from any folder to remove Palomino's records of your ratings for that shoot. - Delete XMP sidecar files to remove embedded ratings and labels.
- Use macOS privacy controls (System Settings › Privacy & Security) to review or revoke Palomino's folder access at any time.
California residents: Palomino does not sell or share personal information as defined by the California Consumer Privacy Act, because no personal information is collected.
European residents: No personal data is processed, so GDPR does not apply to Palomino's operation.
Children
Palomino does not knowingly collect any information from anyone, including children.
Changes to this policy
If this policy changes in a meaningful way, the updated version will be posted here and the effective date above will be updated.
Contact
Questions about privacy? Email nkodner@gmail.com.