Privacy

Last updated August 12, 2026.

Two separate things: the app, which runs on your Mac, and this site, which doesn't. They shouldn't be conflated.

The app

Ferry contains no networking code, with one exception named below. No analytics, no telemetry, no crash reporter, no account.

• Your images never leave your Mac. All conversion is local. No image, no file name and no part of any file is uploaded. There is nothing in the app that could send one.
• Location is always removed. Metadata is copied by allow list, not deny list: only EXIF, TIFF and EXIF auxiliary fields can cross into the output. GPS is dropped by never being copied. That isn't a setting, it's the absence of a code path.
• Camera data is kept, and you can turn it off. Lens, shutter speed and ISO are copied by default because photographers want them and they identify nobody. Settings has a switch.
• No account, no sign in. Your license key is a signature the app verifies offline against a key built into it, so activating your copy contacts nothing. It's stored in your Mac's preferences.
• Originals are never modified. Ferry claims a new file name before writing to it, so nothing is overwritten, altered or deleted.

The one network request

Ferry can check for updates, which downloads a feed from raw.githubusercontent.com. That's GitHub, and like any web request they'll see your IP address and a user agent string. It carries no identifier: no license key, no email, no device ID, no usage data, nothing about your images.

Ferry asks on first run and you can change the answer at any time. Turned off, it makes no requests at all. What GitHub does with the request is covered by their privacy statement.

This site

No cookies, no analytics, and no fonts, scripts or images loaded from anywhere else. It's hosted by Vercel, which keeps ordinary server logs including IP addresses. Downloads are served by GitHub, so clicking a download link is a request to them.

Buying

Payment is handled by Creem as merchant of record. They collect what a payment needs: name, email, billing details, tax information. Card numbers never reach me.

What reaches me is your name and email, which I use to issue your key and send it to you. Your name is written into the key. I keep that record so I can reissue a lost key and handle a refund. Nothing else, and no marketing email.

Your rights

Email a@zigao.wang to ask what I hold, get a copy, correct it or delete it. Deleting it means I can't reissue your key, but the key you have keeps working, because nothing checks with me when it's used.

Changes

If this changes, the date at the top changes with it. A change to what the app does will also be in that release's notes.