Privacy & Data Hygiene

Run the Privacy Dashboard: 15 privacy checks across browsers, logs, clipboard, history. Returns a 0-100 privacy score, rating, and how many checks ran.

Securely clear the safely-removable privacy traces in one pass: clipboard, Quick Look cache, download history, shell history, recent files, system logs, and the Trash.

Scan photos/videos/PDFs under a folder (defaults to home) for hidden EXIF/GPS/author metadata that could leak location or identity.

Remove hidden metadata (EXIF, GPS location, camera/device info) from the photos, videos (mp4/mov), and PDFs in a folder, in place.

Analyze one image file with Cyclone's private vision AI and return a plain-English description, suggested category tags, a quality read (sharp/blurry/dark/low-resolution), a content classification (photo/screenshot/document/receipt/id-document/…), and a sensitive-content flag (true if it looks like an ID, document, or private info). This is the Photo Viewer's 'AI pic diagnostics' for a single file — give the full path to an image (jpg, png, heic, etc.).

Inspect one PDF file for privacy and security issues — read-only, on-device. Reports identifying metadata (author, software, edit history, XMP), and active content the PDF can run on its own: embedded JavaScript, auto-run OpenAction/additional actions, launch actions (opening external programs), hidden embedded files/attachments, external links, forms, and whether it's password-encrypted (and with what algorithm). Give the absolute path to a .pdf file.

Create a sanitized copy of one PDF with its active content removed — embedded JavaScript, auto-run actions, launch actions and embedded files — and (by default) its identifying metadata stripped too. The copy is saved next to the original with a -sanitized name; the original file IS never touched. Cyclone re-inspects the copy and only reports success if it verifies clean.

Combine two or more PDF files into ONE new PDF, saved as a new '-merged' file next to the first source — the originals are NEVER modified. Rebuilding the document also drops each source's hidden metadata and any scripts (privacy-positive), and Cyclone verifies the merged file contains every page.

Split one PDF into separate files by 1-based page ranges — each range becomes its own new '-partN' file next to the original, which is NEVER modified. Cyclone verifies each part contains its requested pages.

Audit firewall status, DNS, and active network connections; returns a network security score and rating.

Clear network privacy traces on this Mac: the DNS cache, ARP cache, recently-connected file shares, and SSH known-hosts. The dns/arp flush needs admin.

List which apps and AI agents hold sensitive macOS permissions (camera, mic, screen recording, full disk) and browser-extension access; returns a 0-100 exposure score.

Securely wipe the clipboard: overwrite it with random data, then clear it, so a copied password or code can't be pasted or recovered.

List the recent files this Mac recorded as downloaded from the internet (macOS's quarantine/download history) — the app that downloaded each and its source URL. This is both an investigation aid (what was downloaded/installed) and a privacy trace. Read-only.

Clear this Mac's download history — the record of which files came from the internet and their source URLs. A privacy-trace cleanup.

Scan the user's browsers for third-party TRACKING cookies (known ad/tracker domains) and report how many browser cookie databases contain them. Read-only.

Remove third-party TRACKING cookies from the user's browsers using a surgical per-tracker SQL delete — it removes ONLY known-tracker cookie rows, never the whole cookie store, so the user stays logged in to their sites. Close the browser first if a database is locked.

Find the screenshots on this Mac (Spotlight, read-only) and report how many, their total size, and the newest ones. Screenshots often sit on the Desktop and can contain sensitive on-screen info.

Report whether this Mac shares analytics/diagnostic data with Apple ('Share Mac Analytics') and the Siri improvement setting, read-only. These are optional data-sharing toggles.)

Report whether Location Services is enabled on this Mac (best-effort read of the system setting).

Report this Mac's iCloud exposure (read locally, no network call): whether it is signed into iCloud, whether iCloud Drive is on, whether Desktop & Documents are syncing to iCloud (those files leave this Mac), and whether Find My Mac is on. The Apple ID is shown redacted.

Check whether the home folder and personal folders (Desktop, Documents, Downloads, Library, .ssh/.gnupg/.aws) are readable or writable by other user accounts on this Mac — a privacy leak on a multi-user Mac. Credential folders should never be group/other-accessible. The Public folder being shareable is expected and not flagged.

Report where new screenshots are saved and in what format (and whether the floating thumbnail is on). Change them with set_screenshot_settings; find or clean existing ones with find_screenshots.

Change where new screenshots are saved and/or their file format (png, jpg, pdf, tiff, heic, gif). The location must be a folder inside home; existing screenshots are not moved.