Privacy

Last updated August 12, 2026.

Two separate things: the app, which runs on your Mac, and this site, which doesn't. They shouldn't be conflated.

The app

Ferry contains no networking code, with one exception named below. No analytics, no telemetry, no crash reporter, no account.

• Your images never leave your Mac. All conversion is local. No image, no file name and no part of any file is uploaded. There is nothing in the app that could send one.
• Location is always removed. Metadata is copied by allow list, not deny list: only EXIF, TIFF and EXIF auxiliary fields can cross into the output. GPS is dropped by never being copied. That isn't a setting, it's the absence of a code path.
• Camera data is kept, and you can turn it off. Lens, shutter speed and ISO are copied by default because photographers want them and they identify nobody. Settings has a switch.
• No account, no sign in. Your license key is a signature the app verifies offline against a key built into it, so activating your copy contacts nothing. It's stored in your Mac's preferences.
• Originals are never modified. Ferry claims a new file name before writing to it, so nothing is overwritten, altered or deleted.

The one network request

Ferry can check for updates, which downloads a feed from raw.githubusercontent.com. That's GitHub, and like any web request they'll see your IP address and a user agent string. It carries no identifier: no license key, no email, no device ID, no usage data, nothing about your images.

Ferry asks on first run and you can change the answer at any time. Turned off, it makes no requests at all. What GitHub does with the request is covered by their privacy statement.

This site

No cookies, no analytics, and no fonts, scripts or images loaded from anywhere else. It's hosted by Vercel, which keeps ordinary server logs including IP addresses. Downloads are served by GitHub, so clicking a download link is a request to them.

Buying

Payment is handled by Creem as merchant of record. They collect what a payment needs: name, email, billing details, tax information. Card numbers never reach me.

What reaches me is your name and email, which I use to issue your key and send it to you. Your name is written into the key. I keep that record so I can reissue a lost key and handle a refund. Nothing else, and no marketing email.

There's no separate database of licenses. A key is worked out from your Creem order, so Creem's record of the sale and a copy of the email I sent you are the whole of it.

Getting your key sent again

The form at software.zigao.wang/key takes an email address, asks Creem whether it bought Ferry, and if so emails the key to the address on that order. The address you type is used for that lookup and is not stored, added to a list or used for anything else. It answers the same way whether or not the address bought Ferry, so it can't be used to find out who owns Ferry. Vercel's server logs record the request as they record any other.

Your rights

Email a@zigao.wang to ask what I hold, get a copy, correct it or delete it. Deleting it means I can't reissue your key, but the key you have keeps working, because nothing checks with me when it's used.

Changes

If this changes, the date at the top changes with it. A change to what the app does will also be in that release's notes.