Privacy Policy

1. Overview

This Privacy Policy explains how Noject, a macOS application developed by ScaleNinja Software LLP ("we", "us", or "our"), handles data.

Noject is designed with privacy by default. It is a desktop application that runs locally on your machine. Noject does not collect, transmit, or store any usage data or content from your devices. We do not track which drives you protect or how you use the application.

2. What Data We Process

Noject does not collect any data from your Mac. The only product-related data we ever see is what you choose to send us, what is shared with us by our payment partners when you buy the app, or limited website analytics when you visit our website:

• Support Communications: If you email us for support, we retain your email address and message history so we can help you and follow up.
• Mac App Store Purchases: If you obtain Noject through the Mac App Store, Apple processes the transaction. Apple provides us with anonymised, aggregated sales reports. We do not receive your name, email, or payment details.
• Direct Website Purchases: If you buy Noject directly from our website using the Direct Download button, our Merchant of Record (Polar.sh) shares your name and email address with us so we can deliver your purchase, provide support, and send product-related communications such as important updates, announcements, and security advisories. Payment-card details are processed by Stripe and never reach our systems. See section 6 for details.
• Website analytics: When you visit the Noject website, we use Umami and Google Analytics to understand basic site traffic and button usage. This website analytics is separate from the Noject app, which contains no analytics code and makes no network connections.

3. What Data Noject Stores Locally

Noject stores a minimal amount of configuration data locally on your Mac to function. This data never leaves your device:

• Protected volume list: Noject stores the Universally Unique Identifiers (UUIDs) of volumes you mark as protected. This allows it to recognise drives even after they've been unplugged and re-plugged later.
• Protected network shares: For any network share you protect, Noject stores its remount URL (protocol, host, and share path) so it can reconnect the share if it drops. The stored URL has any password removed; your share credentials stay in the macOS Keychain and are never written to Noject's configuration.
• Application preferences: Settings such as whether notifications are shown when an ejection is blocked, along with any other in-app configuration.

This data is stored in your Mac's local application container (~/Library/Group Containers/VXNWQ9H93X.com.scaleninja.Noject/) and is inaccessible to any other application. You can delete it at any time by uninstalling Noject.

4. How Noject Works

Noject operates entirely through local macOS frameworks. A small background helper, installed via Apple's SMAppService API, registers an unmount-approval callback with the macOS Disk Arbitration framework. When something tries to eject a volume, the helper inspects the volume's UUID and either approves the unmount or denies it (if you've marked that volume as protected).

Noject never accesses, reads, writes, or modifies the data on your volumes. It only observes mount events and approves or denies unmount requests.

Noject makes no network connections. The app does not include any networking entitlement, contacts no servers, and transmits no data of any kind. The only URLs it ever produces are the help link (handed off to your default browser when you click the help button) and, if you protect a network share, that share's remount URL (handed off to Finder so it can reconnect the share). In both cases Noject hands the URL to another app and does not initiate the connection itself.

Network share reconnection. If you mark an SMB, AFP, or FTP/FTPS share as protected, Noject asks Finder to remount it by URL whenever it disconnects. Finder performs the connection and any credential prompt. Noject stores only the share's URL (protocol, host, and share path) with any password removed; it never reads, stores, or transmits your share credentials, which remain in the macOS Keychain.

5. Mac App Store Distribution

If you obtain Noject through the Mac App Store:

• Payment: Apple handles all payment processing (if the app is paid). We never receive your credit card information or personal billing details.
• Data: Apple provides us with anonymised, aggregated sales and download reports. We do not receive your name, email address, or Apple ID.

Your relationship with Apple is governed by the Apple Media Services Terms and Apple's Privacy Policy.

6. Direct Purchase via Polar.sh

If you purchase Noject directly from our website using the Direct Download button, we use Polar.sh as our Merchant of Record. The button opens Polar checkout in an embedded overlay. Polar handles the checkout flow, payment, receipts, refunds, and tax/VAT compliance on our behalf.

• Payment: Card payments are processed by Stripe (Polar's payment processor). We never see or store your card number, CVC, or other payment-instrument data.
• Data we receive from Polar: Polar shares your name and email address with us so we can deliver your purchase, send your receipt, and respond to support requests. We may also receive country/region information for tax reporting.
• Product communications: We may use your email address to send product updates, release announcements, security advisories, and information about related ScaleNinja products. Security, receipt, support, and purchase-delivery messages may be sent as transactional or relationship communications. Marketing emails will include a way to opt out, and we will honor opt-out requests as required by applicable law.
• What the app sends back: Nothing. After purchase, the Noject app does not perform any license-key activation, hardware fingerprinting, or "phone home" check. It makes no network connections regardless of where you obtained it (see section 4).

Data handled by Polar.sh is subject to the Polar.sh Privacy Policy, and data handled by Stripe is subject to the Stripe Privacy Policy.

7. Permissions

Noject may request the following permissions on macOS, which you grant at your discretion:

• Login Item / Background Task: Allows Noject's background agent to start automatically when you log in and monitor for ejection events. You can manage this in System Settings.
• Notifications: Optional. Allows Noject to show macOS native notifications when an ejection attempt is blocked.

8. Website Analytics

The Noject app itself does not contain analytics, tracking SDKs, advertising frameworks, or crash reporters. However, the Noject website is part of the ScaleNinja website and uses web analytics to understand aggregate traffic and whether visitors interact with page controls such as the Direct Download button.

• Umami: We use Umami for privacy-focused website analytics and event measurement. Umami is designed to avoid cookies and cross-site tracking. It helps us understand aggregate page views, referrers, device/browser information, and button events on our website.
• Google Analytics: We use Google Analytics to analyze website traffic and usage patterns. Google Analytics may use cookies or similar technologies and may process information such as page views, approximate location, device/browser information, and interactions with the website.

These analytics services operate only on the website. They are not included in the Noject macOS app, and the app does not send usage or drive information to ScaleNinja, Umami, Google, Polar, or any other third party.

9. Third-Party Services

Noject relies on the following third parties, and only at distribution or purchase time. The website also uses the analytics providers described above. None of these services are contacted by the running app:

• Apple: For Mac App Store distribution, code signing, and notarisation. The running app does not communicate with Apple servers.
• Polar.sh: Merchant of Record for direct-website purchases. Polar handles checkout, receipts, refunds, and tax/VAT compliance, and shares your name and email with us so we can deliver your purchase, provide support, and send product-related communications as described in section 6.
• Stripe: Payment processor used by Polar.sh. Stripe receives your payment-card details directly during checkout; we never see or store them.
• Umami: Website analytics for aggregate traffic and event measurement on the ScaleNinja website.
• Google Analytics: Website analytics for traffic and usage measurement on the ScaleNinja website.

Noject contains no third-party analytics, tracking SDKs, advertising frameworks, or crash reporters. The analytics services listed above run on the website only.

10. Security

Noject is signed and distributed through the Mac App Store, which means:

• The app's code is verified as originating from ScaleNinja Software LLP.
• Apple performs automated malware scanning on every submitted build.
• Both the main app and its background helper run fully sandboxed, with no network, file-system, or device entitlements beyond a shared App Group used for internal communication between the two processes.

Because Noject does not collect or transmit any data, there is no server-side risk of your drive activity being breached. We never receive it.

11. Children's Privacy

Noject is a technical utility aimed at professionals and enthusiasts. It is not intended for children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected in the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or Noject's data practices, please contact us:

• General email: contact@scaleninja.com
• Support: support@scaleninja.com
• Website: scaleninja.com

Back to Noject