chrisgve
BundleHound

BundleHound privacy and terms

Last updated: 25 October 2026

The short version

BundleHound collects no data. It has no accounts, no analytics, no advertising, no tracking and no crash reporter, and ChrisGVE, who makes it, runs no server for it. Everything it knows about your Mac stays on your Mac, except what you choose to send to support.

It has one feature that can use the internet: looking up App Store details for apps you installed from the App Store. That feature is off until you allow it, it talks only to Apple, and turning it off deletes everything it fetched.

If you write to support, your message is used to answer you and handle your request, and for nothing else.

This matches the App Privacy details on BundleHound’s Mac App Store page: Data Not Collected.

You license the app under Apple’s standard licence for the Mac App Store. The terms on this page cover this website and support, and change nothing in that licence.

Privacy

The app

The App Store lookup

This website and support

Your rights

Children

Changes

Terms of use

Questions

Write to support with the support form (choose “Others” and say that your request is about your data), or reply to any email you have received from ChrisGVE support. (A1.2)

The full text

The policy and terms that apply are the full text below; the sections above restate it in short. Nothing on this page limits any right you have under the mandatory law of the country where you live.

Part A. Privacy policy

A1. Who is responsible

A1.1 BundleHound is published by ChrisGVE, an independent software publisher based in Switzerland (“ChrisGVE”, “the publisher”). ChrisGVE is responsible for the processing described in this policy.

A1.2 Contact for everything in this policy, including requests about your data: the Support Form on the BundleHound support page, or a reply to any email you have received from ChrisGVE support. On the form, choose the topic “Others” and say that your request is about your data.

A1.3 If you live in the European Union. The EU General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”) applies to ChrisGVE’s processing of your personal data in connection with the App and support, because the App is offered to people in the EU (GDPR Art. 3(2)(a)). For that processing ChrisGVE is the controller, and you can reach it as set out in A1.2.

A1.4 If you live in the United States. ChrisGVE does not sell personal information, does not share it for cross-context behavioural advertising and does not use it for targeted advertising, and it receives no personal information from the App, other than the version numbers and the kind of Mac that you can choose to send with a support message (A3.1, A7.2). The Website does not track you across sites, so there is nothing for a browser “Do Not Track” or Global Privacy Control signal to switch off. Requests about your data are handled as described in A10, whatever state you live in.

A2. What this policy covers, and what it does not

A2.1 This policy covers:

A2.2 This policy does not cover processing that Apple carries out on its own account, for example when you buy or download the App, when Apple’s services answer the App’s lookup requests (section A5), or when Apple prepares statistics under settings you control on your Mac. Apple’s privacy policy governs that processing: apple.com/legal/privacy.

A2.3 In this policy, “personal data” means any information relating to an identified or identifiable natural person.

A3. What the App processes on your Mac

A3.1 The App does not collect personal data. It has no account, no analytics, no advertising, no tracking and no crash reporter, and ChrisGVE operates no server for it. Nothing that the App reads or stores on your Mac is sent to ChrisGVE, except the two version numbers and the kind of Mac (Apple silicon or Intel) that you can choose to send with a support message (A7.2).

A3.2 The App runs in the macOS App Sandbox. To build its list of applications, it reads, on your Mac only:

A3.3 The App does not read your documents or your home folder, does not use the Accessibility, Automation or Full Disk Access permissions, and does not read your clipboard. It writes to the clipboard only when you ask it to copy something, writes a file only at the location you choose in the Export save panel, and changes no application.

A4. What the App stores on your Mac

A4.1 The App keeps the following inside its own sandbox folder on your Mac. None of it is sent anywhere:

A5. The App Store lookup: the App’s only connection

A5.1 Off until you allow it. On first launch, the App asks whether it may connect to the App Store. Internet access stays off unless you say yes; declining, or closing the question without answering, leaves it off. You can change your choice at any time in the App, under Settings ▸ Privacy ▸ Allow internet access.

A5.2 What is sent. While internet access is allowed, the App sends requests over HTTPS, directly from your Mac, to Apple’s App Store lookup service at itunes.apple.com. A request carries:

A5.3 How often. The App looks up an App Store application when you select it in the list or open its information. It also looks up the App Store applications on your Mac in the background, not only the ones you select or open: about one application every few seconds while it works through them. Each application is looked up at most once a day. A lookup that failed does not count, including one that reached Apple and was answered with an error: it can be tried again the same day, when you open that application’s information and the App holds no answer from Apple for it, or after the lookup for another application whose information you open gets through. If you change your Mac’s region, the App looks the applications up again for the new country, from its next launch. Over time, Apple’s lookup service therefore receives the App Store identifier of each App Store application on your Mac. Applications that did not come from the App Store are never looked up. Requests carry no Apple ID, no account and no name. Like any request on the internet, each request reaches Apple with the usual technical details of a connection, such as your IP address.

A5.4 The only recipient. Apple’s lookup service is the only recipient of anything the App sends over the internet. ChrisGVE does not receive these requests or Apple’s answers, cannot see them, and holds no copy of them. Apple processes them on its own account, under its own privacy policy. Apple states that the personal data of people in Switzerland is controlled by Apple Distribution International Limited in Ireland, a State the Federal Council recognises as providing adequate data protection (Data Protection Ordinance, Annex 1). Apple also states that this data is generally stored by Apple Inc. in the United States, and that its transfers of data collected in Switzerland are governed by standard contractual clauses.

A5.5 Purpose. The App uses the answers only to show App Store details for your applications inside the App. Neither the App nor ChrisGVE uses them for analytics, advertising, marketing or profiling.

A5.6 Turning it off. Switch off Settings ▸ Privacy ▸ Allow internet access and confirm. The App then stops sending requests and deletes everything it fetched from the App Store, including the history of prices, versions and ratings, and its record of when it asked about each application. If you allow internet access again, the App starts afresh. Every other feature of the App works without a connection.

A5.7 If you live in the European Union. ChrisGVE designed the lookup, but it does not receive the requests, does not decide what Apple does with them and holds no copy of them. Apple processes them as a controller in its own right; its privacy policy states that the personal data of people in the EEA and Switzerland is controlled by Apple Distribution International Limited in Ireland. To the extent ChrisGVE is regarded as a controller of the sending of the requests from your Mac, its legal basis is your consent (GDPR Art. 6(1)(a)), given through the first-launch question or the setting in A5.1. The same consent is the prior consent that national laws implementing Art. 5(3) of the ePrivacy Directive (Directive 2002/58/EC) require before information stored on your device is read and sent. Giving it is optional: if you decline, the App shows no App Store details and everything else works. You can withdraw it at any time, as easily as you gave it, as described in A5.6; withdrawing does not make earlier lookups unlawful (GDPR Art. 7(3)). ChrisGVE does not itself transfer this data anywhere: each request goes directly from your Mac to Apple.

A6. Software from other parties inside the App

A6.1 The App contains no third-party analytics, advertising, crash-reporting or networking software. It includes two open-source libraries, OnboardingKit and PageView, which draw its welcome tour. Neither collects or sends anything. Both are credited in the App’s About window.

A7. The Website and the support channels

A7.1 The Website. The Website is hosted and delivered by Cloudflare, Inc. (“Cloudflare”). The Website itself sets no cookies and loads no analytics, advertising or tracking scripts. The support page also runs Cloudflare Turnstile, described in A7.3(a). As with any hosted site, Cloudflare processes the technical data of each request, such as your IP address and browser details, to deliver the pages and protect the site, and keeps aggregate traffic statistics. See Cloudflare’s privacy policy.

A7.2 What the Support Form collects. The topic you choose, your name (optional), your email address and your message, together with anything you choose to include in it. The form also asks which kind of Mac you use (Apple silicon or Intel), the BundleHound version and the macOS version you use (for example “1.0.0 (42)” and “26.1”); for a bug report these three are required, for any other topic they are optional. When you open the form from within BundleHound, the App fills in the two versions and the kind of Mac for you; you can change any of them, and clear them for any topic other than a bug report. They stay in your browser and are sent only when you press Send; Cloudflare’s spam check (A7.3(a)) runs on the same page. You may also attach up to three screenshots, as PNG or JPEG images. Before they are sent, the page makes a new copy of each image in your browser; the copy leaves out the extra information stored in the original file, such as location and device details, and very large images are made smaller. A screenshot can show more than you mean to share, such as other applications, names or files, so crop out anything your question does not need. Please include only what your question needs; an exported application list, for example, names every application on your Mac, so trim it to the relevant rows first.

A7.3 How a message travels.

A7.4 Use. Your message, any screenshots and your address are used to read your message, reply to you and handle your request, including bug reports and requests about your data. They are not added to any mailing list, not shared for marketing and not sold.

A7.5 Service providers. ChrisGVE uses the following providers to run the Website and the support channels.

Provider Role
Cloudflare, Inc. Website hosting, Turnstile, and sending Support Form messages as email, as ChrisGVE’s processor
Apple (iCloud Mail) Hosting the chrisgve.com support mailbox, under Apple’s iCloud terms

No AI provider receives support messages at present; this policy is updated before one does.

Cloudflare, Inc. is in the United States; it states that it is certified under the Swiss-U.S. Data Privacy Framework, which the Federal Council recognises as adequate for certified organisations (Data Protection Ordinance, Annex 1). Apple states that the data of people in Switzerland is controlled by Apple Distribution International Limited in Ireland. Apple also states that this data is generally stored by Apple Inc. in the United States, and that its transfers of data collected in Switzerland are governed by standard contractual clauses.

A7.6 If you live in the European Union. Cloudflare processes your data as ChrisGVE’s processor under GDPR Art. 28; Apple hosts the support mailbox under its iCloud terms. They are the recipients of your support messages and of the Website’s request data (GDPR Art. 13(1)(e)). ChrisGVE itself is in Switzerland, which the European Commission recognises as providing an adequate level of protection (Commission Decision 2000/518/EC, kept in force by GDPR Art. 45(9)). Where data reaches a provider outside the EU and Switzerland, it is protected as follows:

You can ask for information about these safeguards, and for a copy where one is available, as described in A10.3.

A8. Why the processing is permitted

A8.1 The App’s processing on your Mac never reaches ChrisGVE, except the two version numbers and the kind of Mac that you can choose to send with a support message (A3.1, A7.2), which are processed as part of that message (A8.2). The App Store lookup takes place only with your consent, given through the first-launch question or the setting in section A5, and you can withdraw it at any time with the effect described in A5.6.

A8.2 Support messages are processed because you send them and ask for a reply, and in ChrisGVE’s interest in answering questions and fixing the App.

A8.3 ChrisGVE processes personal data in good faith, only for the purposes stated in this policy and only as far as those purposes require.

A8.4 If you live in the European Union. The legal bases under the GDPR (Art. 6(1); Art. 13(1)(c) and (d)) are:

Giving your email address is not a legal or contractual requirement. It is needed only so that ChrisGVE can reply, and without it ChrisGVE cannot answer you (GDPR Art. 13(2)(e)). For a bug report, the form also needs which kind of Mac you use and the two versions; without them it cannot be sent as a bug report.

A9. How long data is kept

A9.1 On your Mac. What the App stores stays on your Mac until you delete it. What the lookup fetched is deleted as soon as you switch internet access off (A5.6).

A9.2 At the Website. Nothing; see A7.3(b).

A9.3 Support messages. Messages, with any screenshots attached to them, and the replies to them, are kept until the matter is settled, then deleted, at the latest 12 months after the last message. Backup copies go as the backups age out on their own rotation, which may take longer. A child’s message is deleted promptly after the reply (A13). You can ask for earlier deletion at any time (A10).

A10. Your rights

A10.1 You may ask ChrisGVE, free of charge:

A10.2 Because the App sends nothing to ChrisGVE, the only personal data ChrisGVE can hold about you are the support messages you sent. To delete what the App stores on your Mac, see A10.4.

A10.3 Send a request through the Support Form, or reply to any email you have received from ChrisGVE support. On the form, choose the topic “Others” and say that your request is about your data; a request sent with another topic is still handled as a request. ChrisGVE replies to the address the request came from, and may ask you to confirm the request from that address before acting on it.

A10.4 Deleting everything the App stored. Quit the App, delete it, and delete the folder ~/Library/Containers/com.chrisgve.bundlehound (in Finder, choose Go ▸ Go to Folder, then paste the path).

A10.5 If you think your data has been processed unlawfully, you may report it to the Swiss Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch, or bring a claim before the competent court.

A10.6 If you live in the European Union. Under the GDPR you have the right to access your personal data (Art. 15), to have it rectified (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format where the GDPR gives that right (Art. 20), and to withdraw your consent at any time (Art. 7(3)). Use A10.3 to exercise them. ChrisGVE answers within one month of receiving your request. Where a request is complex, or there are many, that period may be extended by two further months; ChrisGVE then tells you so, with the reasons, within the first month (Art. 12(3)).

A10.7 Your right to object. Where ChrisGVE relies on its legitimate interests (A8.4(b) and (c)), you may object at any time, on grounds relating to your particular situation (GDPR Art. 21(1)). ChrisGVE then stops that processing unless it demonstrates compelling legitimate grounds that override your interests, or needs the data for legal claims.

A10.8 Complaints in the EU. You may also lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live, where you work or where the alleged infringement took place (GDPR Art. 77(1)).

A10.9 If you live in the United States. You can use A10.1–A10.3 to ask what personal data ChrisGVE holds about you, to correct it or to delete it, whatever state you live in, and ChrisGVE will not treat you differently for asking. ChrisGVE does not sell or share personal data and does not use it for targeted advertising (A1.4), so there is no sale or sharing to opt out of.

A11. Security

A11.1 The App runs inside the macOS App Sandbox, its only network permission is for outgoing connections, and it uses that permission only for the lookup in section A5, sent over HTTPS. The Website is served over HTTPS. The Support Form’s processing stores nothing and logs neither your message nor your address. Support mail is held in an iCloud Mail mailbox that only the publisher’s accounts can access.

A12. AI assistance with replies, and automated decisions

A12.1 Replies to support messages may be drafted by an AI assistant. It says that it is an AI when it writes to you and does not pretend to be a person. Anything it cannot settle, and anything contractual or legal, goes to the person who makes BundleHound, and the assistant tells you when that happens. No AI provider receives support messages at present; this policy is updated before one does.

A12.2 No decision with legal effect for you, or that significantly affects you, is taken by automated means alone. Purchases and refunds are decided by Apple, not by ChrisGVE or its assistant.

A12.3 If you live in the European Union. No decision based solely on automated processing that produces legal effects concerning you, or similarly significantly affects you, is taken (GDPR Art. 22(1)). The assistant tells you that it is an AI, as the EU Artificial Intelligence Act requires of AI systems that interact directly with people (Regulation (EU) 2024/1689, Art. 50(1)). No AI provider receives support messages at present, so none can use their content to train its models; this policy is updated before one does (A7.5).

A13. Children

A13.1 The App collects no data from anyone, including children. ChrisGVE does not knowingly ask children for personal data through the support channels; if a child has written to support, a parent or guardian may ask for the message to be deleted under A10.

A13.2 If you live in the United States. The App and the Website are general-audience services and are not directed to children under 13. ChrisGVE does not knowingly collect personal information from children under 13. If ChrisGVE learns that a support message came from a child under 13, it uses the child’s contact details only to reply once to that message, does not use them to contact the child again, and deletes the message promptly after replying. A parent or guardian can ask for deletion as described in A10.3.

A14. Changes to this policy

A14.1 ChrisGVE updates this policy whenever what the App, the Website or the support channels do with data changes, and changes the date at the top of the page with it. A change that reduces your protection takes effect only for data processed after the change is published.

A14.2 This policy matches the App Privacy information on the App’s Mac App Store page: Data Not Collected.

Part B. Terms of use

B1. What these terms cover

B1.1 These terms of use (the “Terms”) apply to your use of the Website, the Support Form and the support emails that follow from it. They also explain how they relate to the licence for the App.

B1.2 By using the Website or contacting support, you accept these Terms. If you do not accept them, please do not use the Website or the support channels; this does not affect your licence to the App.

B2. The App’s licence

B2.1 The App is licensed, not sold. Your licence to use it is governed by Apple’s Licensed Application End User License Agreement (the “Standard EULA”): apple.com/legal/internet-services/itunes/dev/stdeula. For the App, ChrisGVE is the “Application Provider” and the “Licensor” within the meaning of the Standard EULA. ChrisGVE supplies no custom licence agreement.

B2.2 These Terms do not change, add to or limit the Standard EULA. The scope of your licence, and any warranty and liability concerning the App, are governed only by the Standard EULA and by the law that applies to it. If anything on this page appears to conflict with the Standard EULA as regards the App, the Standard EULA prevails.

B3. Purchase, price and refunds

B3.1 The App is sold through the Mac App Store. Apple takes the payment and shows the price, including any taxes, for your storefront at the time of purchase. This Website shows no price and takes no payment.

B3.2 Requests for refunds go to Apple, which decides them: reportaproblem.apple.com. ChrisGVE cannot see purchases, issue refunds or change Apple’s decision.

B3.3 Nothing in these Terms limits the rights you have against Apple or ChrisGVE under mandatory consumer law.

B3.4 If you live in the European Union. If the App is not supplied, or does not conform to what was agreed, the law of your country gives you remedies under its rules implementing Directive (EU) 2019/770 on contracts for the supply of digital content. A term, agreed before you report the problem, that excludes or limits those remedies to your detriment is not binding on you (Directive (EU) 2019/770, Art. 22(1)). Neither these Terms, nor the Standard EULA, nor Apple’s refund process takes them away. Raise a problem with the purchase with Apple (B3.2), and a problem with the App itself with ChrisGVE (B4). Whether you may withdraw from the purchase within 14 days is governed by Apple’s terms of sale and the law of your country. For digital content, that right ends only once supply has begun with your prior express consent, after you have acknowledged that you lose the right, and once you have received confirmation of both (Directive 2011/83/EU, Arts. 9(1) and 16(m)).

B4. Support

B4.1 ChrisGVE offers support for the App through the Support Form. Support is free of charge. No response time is promised.

B4.2 Replies may be drafted by an AI assistant, as described in A12. Replies are information and help. They do not change these Terms or the Standard EULA, do not create a contractual obligation, and do not promise features or dates.

B4.3 ChrisGVE may decline or stop responding to messages that are abusive, unlawful or sent in bulk.

B5. Your use of the Website and the support channels

B5.1 You agree not to:

B6. Content and intellectual property

B6.1 Unless stated otherwise, the text, images and design of the Website are © ChrisGVE. All rights reserved. The names BundleHound and ChrisGVE identify the publisher’s products and may not be used in a way that suggests the publisher endorses something it does not.

B6.2 Open-source components inside the App are credited, with their licences, in the App’s About window.

B7. Information on the Website, and liability for the Website and support

B7.1 Information on the Website and in support replies is given with care. The App itself and its Mac App Store listing are the authority on what the App does and what it requires. The Website may contain mistakes or fall out of date, and may be changed or taken offline at any time.

B7.2 To the extent permitted by applicable law, ChrisGVE is not liable for loss arising from the use of the Website or of free support, except where the loss was caused intentionally or by gross negligence.

B7.3 Section B7.2 does not limit or exclude:

B7.4 If you are a consumer in the European Union. B7.2 applies to you only as far as the law of your country allows. In particular, it does not exclude or limit ChrisGVE’s liability:

B7.5 IF YOU LIVE IN THE UNITED STATES. B7.2 LIMITS CHRISGVE’S LIABILITY FOR THE FREE WEBSITE AND FREE SUPPORT ONLY TO THE EXTENT THE LAW OF YOUR STATE PERMITS. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES OR LIABILITY, SO SOME OR ALL OF B7.2 MAY NOT APPLY TO YOU, AND YOU MAY HAVE OTHER RIGHTS THAT VARY FROM STATE TO STATE. B7.2 does not concern the App: any warranty and liability for the App are governed by the Standard EULA (B2.2, B7.3(d)).

B8. Links and services of others

B8.1 The Website links to sites and services run by others, including Apple and Cloudflare. ChrisGVE does not control them and is not responsible for their content or their handling of data; their own terms and policies apply.

B8.2 The Website names other applications, such as window managers, to show where a bundle identifier is used. The names belong to their owners and are used only to describe compatibility or use. Their mention implies no affiliation or endorsement.

B9. Trademarks

B9.1 Apple, the Apple logo, Mac, macOS and Mac App Store are trademarks of Apple Inc., registered in the U.S. and other countries and regions. App Store is a service mark of Apple Inc. BundleHound is not affiliated with, sponsored by or endorsed by Apple.

B10. Changes to these Terms

B10.1 ChrisGVE may change these Terms when the Website, the support channels or the applicable law change. Changes apply from the date shown at the top of this page and only to use of the Website and support after that date. They never change the Standard EULA.

B11. Governing law and jurisdiction

B11.1 These Terms, and any dispute about the Website or support, are governed by Swiss law, excluding its conflict-of-laws rules.

B11.3 If you are a consumer, B11.1 does not deprive you of the protection of mandatory provisions of the law of the country where you have your habitual residence, where that law applies, or of the right to bring proceedings before the courts of your domicile or habitual residence. Under Swiss law, a consumer may sue at their own domicile or habitual residence and cannot waive that forum in advance (Federal Act on Private International Law, Art. 114).

B11.4 Disputes about the App’s licence are governed by the governing-law clause of the Standard EULA, not by this section.

B11.5 If you are a consumer in the European Union. Where the Lugano Convention’s rules on consumer contracts apply, you may bring proceedings against ChrisGVE either in the courts of Switzerland or in the courts of the place where you are domiciled, and ChrisGVE may bring proceedings against you only in the courts of the State where you are domiciled (Lugano Convention of 30 October 2007, Arts. 15(1)(c) and 16). The choice of law in B11.1 does not deprive you of the protection of the mandatory provisions of the law of the country of your habitual residence (Regulation (EC) No 593/2008, “Rome I”, Art. 6(2)). The European Commission’s online dispute resolution platform was discontinued when Regulation (EU) No 524/2013 was repealed with effect from 20 July 2025 (Regulation (EU) 2024/3228), so no link to it is given.

B11.6 If you live in the United States. These Terms contain no arbitration agreement and no class-action waiver. B11.1 applies to you to the extent the law of your state allows.

B12. General provisions

B12.1 If any provision of these Terms is invalid or unenforceable, the rest remain in force, and the provision is replaced by a valid one that comes as close as the law allows to its purpose. If you are a consumer, a provision that is not binding on you under consumer protection law is not replaced; it simply does not apply to you.

B12.2 If ChrisGVE does not enforce a provision, that is not a waiver of it.

B12.3 These Terms are written in English. If a translation is published, the English text prevails, unless the law of your residence requires otherwise.

B13. Contact

B13.1 Notices and messages to ChrisGVE can be sent through the Support Form on the BundleHound support page, or by replying to any email you have received from ChrisGVE support. ChrisGVE sends notices to you at the email address you used to contact it.