The short version
CloudKit Explorer is built around a simple principle: your data is yours. The app does not collect, store, or transmit any personal information to us or to any third party. It is a tool that talks directly to your own CloudKit containers through Apple's services — nothing in between.
Where your data lives
All of the information the app needs is stored locally on your Mac:
- CloudKit Server-to-Server keys (
.p8files) and web authentication tokens are stored in the macOS Keychain. - Container configurations (container IDs, environment, database scope) are saved in the app's local storage.
- Your CloudKit records are fetched on demand from Apple's API and displayed in the app. They are not collected or retained by us.
Network connections
The app makes exactly one kind of outbound connection — HTTPS requests to Apple's CloudKit Web Services. It contacts no other servers.
| Destination | Purpose | Shares your data? |
|---|---|---|
| api.apple-cloudkit.com | Read and write your CloudKit records and schema | No third party |
| Any other server | — | Never contacted |
Required permissions
To do its job, the app uses a small set of macOS capabilities:
- Outgoing network access — to reach Apple's CloudKit API over HTTPS.
- Read-only file access — only when you choose to import a
.p8key file. - Keychain access — to store your keys and tokens securely on device.
The app runs inside Apple's App Sandbox.
Analytics & tracking
- No analytics SDKs.
- No crash-reporting services.
- No advertising identifiers, no tracking, no profiling.
Children's privacy
CloudKit Explorer is a developer tool and is not directed at children. It does not knowingly collect any information from anyone, including children under 13.
Your rights (GDPR & CCPA)
Because CloudKit Explorer does not collect or process any personal data on our side, there is no personal information for us to access, correct, export, or delete. The data you work with lives in your own Apple CloudKit account and on your device, fully under your control. You can remove all locally stored configuration and credentials at any time by deleting the app's data or the app itself.
Changes to this policy
If this privacy policy changes, the updated version will be posted on this page with a revised date. Continued use of CloudKit Explorer after an update constitutes acceptance of the revised policy.
Privacy questions?
If anything here is unclear or you'd like more detail about how CloudKit Explorer handles data, get in touch.
Email Support support-cloudkitexplorer@alessandroamoroso.com