Privacy

Short version: Bòcan doesn't spy on you.

Longer version follows.

What Bòcan sends

Nothing. No usage statistics. No anonymous metrics. No crash reports unless you explicitly approve a specific report. No "phone home" to check that your licence is valid, because there is no licence.

The only network traffic the app makes by default is:

• Checking for updates (daily, can be disabled) by fetching a single XML feed from https://bocan.app/appcast.xml. Your IP shows up in our web server's logs along with everyone else's.

What Bòcan sends only if you turn it on

• Scrobbling to Last.fm or ListenBrainz. Off by default. Per-account, with credentials you supply, sent only to the service you authorised.
• AcoustID lookups to AcoustID, when you ask it to identify a track. Sends an audio fingerprint (not the audio) plus the track's existing tags.
• Lyrics fetches to Last.fm when you toggle the lyrics pane and the file has none. Sends artist + title.
• MusicBrainz cover art. Sends an MBID, gets back an image.
• Crash reports via MetricKit. Off by default. Each report is shown to you in full before sending; you decide. We never auto-submit.

What we collect on this website

Standard web server logs (IP, user-agent, request path, timestamp), kept for 30 days, used only to spot abuse. No cookies. No analytics. No tracking pixels. No "we use cookies to enhance your experience" banner because we don't and we don't.

What's stored on your machine

• Your library database, in ~/Library/Application Support/Bocan/.
• Logs, in ~/Library/Logs/Bocan/.
• Preferences, in ~/Library/Preferences/io.cloudcauldron.bocan.plist.

Delete those folders to delete everything Bòcan knows about you.

Source & verifiability

The source code is public. If you don't believe us, run a packet sniffer. Charles or Little Snitch will both confirm the above.

Contact

Questions? Open an issue on GitHub.