Privacy Policy

Who is responsible (controller)

Espectro Gall Ltda, CNPJ 03.905.837/0001-78, a Brazilian company that operates the MakerNet brand and the makernet.com.br website, is the controller of the personal data described here.

Contact and data subject channel: sac@makernet.com.br.

Data protection officer and contact channel

Under ANPD Resolution CD/ANPD No. 2/2022, which applies to small-scale processing agents, we have not appointed a data protection officer (encarregado). Instead, we keep a direct communication channel with data subjects: sac@makernet.com.br. Any request about your data, including to the ANPD's attention, can be sent there.

Which edition of Super File Manager do I have?

• Super File Manager (Mac App Store): bought and updated through Apple. See "Mac App Store edition".
• Super File Manager Max: distributed at makernet.com.br, with a MakerNet license and its own updates. See "Max edition".

Super File Manager — Mac App Store edition

This edition has no MakerNet account and no website license. It does not send personal data to us.

• We do not collect personal data. We do not send your files, file names, folder names, photos or usage statistics to us or to anyone.
• Search, duplicate detection, cleanup and photo analysis all run on your Mac. Photo analysis uses Apple's sensitive-content detector or a model stored on your Mac; photos are never uploaded.
• SFTP connections go only to servers you enter yourself, directly from your Mac to that server. We do not see those connections or credentials.
• The app only reads your home folder and disks after you grant permission in the standard macOS panel (App Sandbox). You can revoke it at any time in System Settings.
• Purchases and subscriptions are handled by Apple (StoreKit). We do not receive your payment details; Apple may share aggregated sales information with us under its own policies. Apple's privacy policy applies to that part.

Super File Manager — Max edition

This edition talks to the MakerNet server only for licensing, free quota and optional account features. File contents, names and paths are never sent. What is sent:

• Activation: your e-mail, the license key, a hardware fingerprint and the app version. The fingerprint is a SHA-256 hash of the Mac's platform identifier plus the app bundle ID; it cannot be reversed to recover the identifier. Server-side we may also record the device label, Mac model and macOS version, and your IP address (for rate limiting, security and audit).
• Periodic revalidation (at launch and every few hours while the app is open): the license, the fingerprint and the app version, so we can confirm the license is still valid.
• Free quota: how many bytes you have used in each one-time tool (cleanup, duplicates, photos) and a random installation secret, linked to the fingerprint, so the free quota cannot be reset by reinstalling. No file names are included.
• Optional MakerNet account: sign-in happens in your browser; the access token is stored in your Mac's Keychain.
• Payments: processed by Asaas, which collects the data needed to charge (name, e-mail, CPF/CNPJ and card, Pix or boleto data). We do not store card numbers. We keep the purchase and renewal records needed to manage the license and for tax purposes.
• Updates: the app checks the update feed on our website and downloads the update; this is a normal web request and may be recorded in server logs (IP address, date and time).

makernet.com.br website and MakerNet account

• Account: name, e-mail and password. The password is stored only as a hash (bcrypt); we cannot read it.
• Sign-in with Google or Facebook (only if you choose it): we receive your name, e-mail and profile picture from that provider.
• Licenses, activated devices, purchases and renewals linked to your account.
• Support tickets: what you write in them and the replies.
• Downloads from the account area: date, IP address and browser identification (user agent), to control access to licensed files.
• Data you save in the online tools (for example, Print$Calc).
• Access records (IP address, date and time), kept as required by the Brazilian Internet Civil Framework (Marco Civil da Internet).
• Password sign-in and sign-up attempts: the e-mail typed, IP address, date and time (never the password), used only to limit repeated failed attempts.

Purposes and legal bases

• Performance of a contract (LGPD art. 7, V): creating and maintaining your account, signing in, issuing, activating and revalidating licenses, free quota, processing purchases and renewals, support and service e-mails (account confirmation, password, license and ticket notices).
• Compliance with a legal obligation (art. 7, II): invoices and accounting/tax records of purchases; keeping access records under art. 15 of the Marco Civil da Internet.
• Legitimate interest (art. 7, IX): security of sign-in (for example, limiting failed attempts), fraud and abuse prevention (hardware fingerprint for the free quota, license audit log) and download records.
• We do not use your data for advertising or profiling.

Who we share data with

• Hosting provider: the website, database and files run on a server we rent; the provider only stores and processes data on our instructions.
• Asaas: payment processing for the Max edition.
• E-mail provider (SMTP): sending account, license and support e-mails.
• Google and Meta (Facebook): only if you choose to sign in with them.
• Apple: payments, subscriptions and distribution of the Mac App Store edition.
• Cloudflare (cdnjs): the Print$Calc tool loads a code library from cdnjs; your browser fetches it directly (IP address and browser data reach Cloudflare). No cookie is set by us for that.
• Public authorities, when required by law or court order.
• Some of these providers (Google, Meta, Apple, Cloudflare) may process data outside Brazil, under the safeguards of their own contracts and policies (LGPD art. 33).

Cookies and browser storage

The website uses only essential cookies, needed for sign-in and security, and browser storage for your preferences. There are no analytics, advertising, tracking pixels or third-party cookies. Because they are essential, they do not require consent; you can block them in your browser, but signing in will stop working.

• authjs.session-token (in HTTPS: __Secure-authjs.session-token): keeps you signed in. Lasts up to 30 days without use, or until you sign out.
• authjs.csrf-token (in HTTPS: __Host-authjs.csrf-token): protects sign-in forms against forged requests. Lasts until you close the browser.
• authjs.callback-url: remembers which page to return to after signing in. Lasts until you close the browser.
• authjs.state, authjs.pkce.code_verifier and authjs.nonce: only when signing in with Google or Facebook, to protect the return from the provider. Last 15 minutes.
• makernet-lang: remembers the language you chose for the website (Português, English or Español). It is set when you pick a language in the header, or when we take you to the version in your browser's language on your first visit. Lasts 1 year.
• Browser storage (localStorage) makernet.theme-mode: the light/dark theme you chose.
• Browser storage (localStorage) makernet.cookie-notice: remembers that you closed the cookie notice.

How long we keep data

• Mac App Store edition: we hold no data about you, so there is nothing to retain.
• Account, licenses, devices, quota, support tickets and download records: while the account or license exists. After a deletion request, we delete or anonymize them within 30 days, except what the law requires us to keep.
• Purchase, payment and invoice records: 5 years, the Brazilian tax limitation period.
• Access records (IP address, date and time): at least 6 months, as required by art. 15 of the Marco Civil da Internet.
• Server logs of the update feed and downloads: kept only as long as needed for security and operation.
• Sign-in and sign-up attempt records (used to limit failed attempts): deleted automatically after 30 days.

Your rights (LGPD art. 18)

You may ask us, free of charge:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data, or data processed against the LGPD;
• portability of your data to another provider;
• deletion of data processed with your consent, and withdrawal of consent;
• information about the public and private entities we share data with, and about the consequences of not giving consent;
• objection to processing based on legitimate interest, and review of automated decisions.

How to exercise your rights

Write to sac@makernet.com.br from the e-mail on your account (or tell us how to confirm your identity). We confirm receipt and reply within 15 days (LGPD art. 19). For the Mac App Store edition, requests about purchases must go to Apple.

If you are not satisfied, you may file a complaint with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd. Equivalent laws, such as the GDPR, also apply where relevant.

Security

• Traffic to the website is encrypted (HTTPS) and passwords are stored only as hashes.
• Access to administrative areas is restricted to authorized people.
• If a security incident may cause you relevant risk or harm, we will notify you and the ANPD (LGPD art. 48).

What we do NOT do

• We do not sell or rent your data.
• We do not use advertising, tracking or third-party analytics on the website or in the app.
• We do not read, copy or upload the contents of your files or photos.

Children

The website and the app are not directed at children and we do not knowingly collect their data.

Changes to this policy

If we change this policy, we will update the date above. Material changes will be highlighted on this page.

Contact

Espectro Gall Ltda, CNPJ 03.905.837/0001-78 — sac@makernet.com.br