Privacy Policy

What stays on your Mac

Peony keeps these on your Mac and sends them nowhere:

• Your VPN settings, such as hosts, usernames, and the hosts to check, in ~/Library/Application Support/Peony/profiles.json.
• Passwords and WireGuard configs, in your Keychain under app.peony.Peony.
• Your preferences, including the last VPN you used, in the app.peony.Peony preferences.
• The root helper at /Library/PrivilegedHelperTools/app.peony.helper and its sudoers rule at /etc/sudoers.d/peony.
• While a tunnel is up, the config the helper generates for it, in the root-only directory /var/run/peony. FortiGate's holds your password, so it is deleted as soon as openfortivpn has read it.

The log window shows the last 500 lines the VPN client printed. Peony holds them in memory and they are gone when it quits. It also writes a few status lines to the macOS system log, such as that a tunnel process exited.

What leaves your Mac

Peony makes two kinds of connection, both to places you chose:

• Your VPN. The client you installed (openfortivpn, openconnect, WireGuard, or NetBird) connects to the server in your settings and signs in with your credentials. Your VPN's operator handles that traffic under its own policy.
• Reachability checks. While a tunnel is up, Peony opens a TCP connection to each host you listed, on port 443 unless you gave another, and times it. It sends no data over that connection.

Nothing goes to the author or to any third party, because there is no server to send it to. Peony doesn't check for updates.

Downloads

You download Peony from GitHub Releases, or through Homebrew, which fetches the same file from GitHub. The GitHub Privacy Statement covers those downloads.

This website

This site sets no cookies and runs no analytics or tracking scripts. Its fonts and images load from the site itself. It's hosted on Vercel, which keeps standard server logs, such as IP addresses and browser details, under the Vercel Privacy Policy. The changelog reads release dates from GitHub when the site is built, not when you visit.

Removing your data

Everything Peony keeps is on your Mac. brew uninstall --zap peony removes the app, the helper, the sudoers rule, your settings, and your preferences. Keychain items stay until you delete them in Keychain Access.

Changes and questions

If this policy changes, this page shows a new date, and the change is in the site's history on GitHub. Ask questions in GitHub issues.