| 数据 | 用途 | 处理/存储位置 |
|---|---|---|
| 菜单配置与文件模板 | 决定右键菜单显示哪些功能与模板 | 本机 App Group 沙盒容器内的偏好设置 |
| 文件夹授权书签 | 记住你已授权的文件夹（新建/移动/拷贝/在终端中打开等），避免重复弹窗 | 本机安全书签（Security-Scoped Bookmark），仅本机有效 |
| 你右键操作的文件/文件夹路径 | 执行你触发的动作 | 仅内存，动作完成即释放；拷贝的路径仅进入本机剪贴板 |
| 新建的文件 | 按模板在你指定的文件夹创建 | 直接写入你右键的文件夹，App 不留存副本 |
| 最近用过的归档位置（最多 5 条目录路径） | 在「移动到 / 拷贝到」子菜单里直接列出你常去的位置 | 本机 App Group 沙盒容器；可在「菜单设置」中关闭或一键清除 |
本 App 不与任何服务器通信。没有更新检查、没有遥测、没有任何下载。你可以在完全断网的环境下使用全部功能。
牧云右键助手运行在 macOS App Sandbox 中。访达扩展只在你主动点击菜单项时才操作对应的文件或文件夹；首次在某个文件夹执行新建、移动/拷贝、在终端中打开等操作时，系统会弹出标准授权面板请求你确认，确认后该文件夹此后不再询问。已授权列表可在主 App「权限管理」中查看和撤销。App 无法访问你未授权的任何位置。
主 App「权限管理」页面可查看并撤销全部已授权文件夹。如需彻底清除：从「应用程序」文件夹删除 App，并移除 ~/Library/Group Containers 下名为 7252W54VUU.com.gezhipeng0201.MuyunRight 的容器目录，即无任何残留。
如对本政策有疑问，请通过 App Store 联系页或本项目仓库的 Issue 提交。
| Data | Purpose | Where |
|---|---|---|
| Menu settings & file templates | Decide which actions and templates appear in the context menu | Preferences inside the local App Group sandbox container |
| Folder authorization bookmarks | Remember folders you've authorized for "New File" | Local Security-Scoped Bookmarks; valid only on this Mac |
| Paths of items you right-click | Perform the action you trigger | In-memory only; copied paths go only to your local clipboard |
| Files you create | Created from a template in the folder you chose | Written directly into that folder; the app keeps no copy |
| Recent destinations (up to 5 folder paths) | Offer the places you file things into most often in the Move/Copy submenu | Local App Group container; can be turned off or cleared in Menu Settings |
The app talks to no servers at all. No update checks, no telemetry, no downloads. Everything works completely offline.
MuyunRight runs inside the macOS App Sandbox. The Finder extension touches a file or folder only when you explicitly click a menu item. The first time you create a file in a folder, the standard system authorization panel asks for your confirmation; that folder is never asked about again. The app cannot access any location you haven't authorized.
Delete the app from /Applications and remove the container named 7252W54VUU.com.gezhipeng0201.MuyunRight under ~/Library/Group Containers. Nothing else remains.
For questions about this policy, please use the App Store support page or open an issue on the project repository.
For App Store reviewers and security-conscious users:
com.apple.security.app-sandbox) with Hardened Runtime enabled.user-selected files (read/write), security-scoped bookmarks (app-scope), and one App Group for sharing preferences between the app and its extension — no network entitlements, no device hardware entitlements, no Full Disk Access.com.apple.FinderSync); directory monitoring is used only to display menu items and grants no file access by itself.NS*UsageDescription) are declared in both the app's and the extension's Info.plist.ITSAppUsesNonExemptEncryption is declared NO.