Caja - Privacy Policy

Caja

Privacy Policy

Effective date: August 24, 2026 · Applies to the Caja app for macOS

Caja is a box of small tools that run on your Mac. It was built so that the work happens on your computer and stays there.

This policy describes exactly what Caja does with information. It is short because Caja does very little.

1. The short version

• Caja has no accounts, no sign-in, and no analytics.
• Your files are never uploaded anywhere. The only tool that copies them at all is respalda, and only into the folder you pick yourself.
• Caja makes one kind of network request, and only one: asking whether a newer version of Caja exists. Nothing about you or your files goes with it.

2. What stays on your Mac

Nothing here is ever transmitted, and nothing is ever deleted.

Your files. What Caja touches depends on the tool you use:

• ordena reads the *names* of the files in the folder you choose, and moves them inside that same folder. It never opens them.
• respalda reads the *full contents* of the files you choose. It has to: copying them requires reading them, and so does checking that the copy arrived whole. It writes that copy only to the destination you pick yourself, and nowhere else.
• candado changes one flag on a folder — the same one macOS sets when you tick "Locked". It doesn't look inside.
• instalados reads the names and sizes of the installer files in Downloads and on your Desktop, and checks which apps you have in Applications. It moves an installer to the Trash only when you press its button, and only when the matching app is already installed. It never deletes anything: what goes to the Trash stays there until you empty it.

What else Caja looks at on your Mac.

• puerto reads which programs are listening on network ports: their name, where they were launched from, and how long they have been running. At your explicit request it can ask one of them to close. It never inspects what a program is doing.
• discos reads which disks and disk images are mounted, and can eject one.

Your undo history. So that a change can be reversed, Caja writes a small record of each run to `~/.ordena/historial/`. That record lists the file paths involved — the names and locations of your files, never their contents. It lives only on your Mac. It is deleted the moment you undo that run; if you never undo, it stays until you delete it yourself.

Your preferences. Your language, and — if you use respalda — the folder you chose to copy into. Both live in `~/.caja/ajustes.json`.

None of these ever leave your computer.

3. What leaves your Mac

One thing: Caja asks julio-lama.com for the number of the latest published version.

It does this at most once a day, shortly after you open the app, and again whenever you press the update link yourself. Between those checks it does not touch the network at all. Nothing is ever downloaded or installed on its own: an update is only ever an offer, and you decide.

That request carries nothing about you, your files, or your Mac — only what any web request carries: your IP address and a generic user agent (`Python-urllib`).

The request is served by Vercel, and downloads are served by Supabase. Like most web hosts, both keep short-lived server logs that include IP addresses. Those logs exist to run and protect the service, not to build a profile of you.

Apart from that once-a-day question, Caja never touches the network.

4. What Caja does not do

• No accounts, email addresses, or passwords.
• No analytics, telemetry, crash reporting, or usage tracking.
• No advertising, and no sale or sharing of data with anyone.
• No unique device identifier of any kind.
• No background activity: Caja does nothing while it is closed.

5. Your system language

To open in the right language, Caja asks macOS which language you prefer. That answer is used on your Mac and sent nowhere.

6. Children

Caja is a general-purpose utility and is not directed at children. It collects no personal information from anyone, including children.

7. Your rights

Because Caja holds no personal data on any server, there is nothing to export, correct, or delete on request. Everything Caja stores is on your own Mac, and you can remove all of it at any time — the Support page explains how.

8. Changes to this policy

If this policy changes, the effective date above changes with it, and the current version always lives at this address.

9. Contact

Questions about privacy: jlama@julio-lama.com