Skip to content
D1Explorer
Download

Privacy Policy

Last updated: September 7, 2026

Introduction

D1Explorer ("the App") is a native application for Mac, iPhone and iPad developed by Magenta Creations ("we", "us", "our") that allows you to browse, query, and edit Cloudflare D1 and SQLite databases. This Privacy Policy explains how we handle your information when you use the App.

We are committed to protecting your privacy. D1Explorer is designed as a local-first application — your data stays on your device, and leaves it only for Cloudflare's API endpoints at your direction or, if you leave iCloud sync enabled, for your own iCloud account. See iCloud Sync below.

Information We Collect

The App collects nothing. D1Explorer does not collect, transmit, or store any personal information. It runs on your device and talks only to Cloudflare, Apple, and nobody else — there is no account, no telemetry, and no server of ours it can reach.

This website is a separate thing, and one page of it does receive data — the feedback form, and only when you choose to fill it in and press send. That distinction is the whole design: the App never sends feedback, it opens a web address in your browser and stops. What the form collects is set out below.

Feedback Form

If you send feedback from this site, we receive what you typed — the subject and the details — and your email address if you chose to give one. The address is optional; leave it blank and the report is anonymous, and we will still read it.

Opening the form from inside the App (Help → Send Feedback) also fills in four technical facts: your D1Explorer version, your macOS version, your Mac's model identifier (like Mac16,10), and your language. They arrive in the web address itself, so you can read them in your browser's address bar before anything is sent, and the form shows them as ordinary editable fields you can change or clear. Nothing is hidden.

That is the entire list. We never receive your username, your computer's name, any file, folder or database name, a serial number, or any identifier that would let two reports be recognised as coming from the same Mac.

Submissions are stored in a Cloudflare D1 database hosted in Western Europe and emailed to support@mgcrea.io so we can reply. We keep them for twelve months, then delete them. They are never used for marketing, never sold, and never shared. The form sets no cookie, and nothing in the code that handles your submission ever reads or stores your IP address. Like every page here it loads the site-wide visitor statistics described below, which are cookieless and do not identify you.

To have a submission deleted before those twelve months are up, email support@mgcrea.io.

Cloudflare API Tokens

To connect to your Cloudflare D1 databases, you provide API tokens within the App. These tokens are:

iCloud Keychain is Apple's end-to-end encrypted credential store: tokens synced through it are readable only by your own devices, not by Apple and not by us. You can turn the setting off in Settings → General, which keeps every token on the device that created it.

Database Content

When you browse or query your Cloudflare D1 databases, all requests are sent directly from your device to Cloudflare's API. Query results are displayed locally in the App and are not persisted beyond the current session unless you explicitly export them. We never have access to your database content.

Local SQLite Files

When you open local SQLite files, the App accesses them using macOS security-scoped bookmarks. File contents remain on your device and are never transmitted anywhere.

Draft SQL and Apple Intelligence

Draft SQL turns a question you type, such as "active pro users, newest first", into a SQL statement. It uses Apple's on-device Foundation model: the work happens on your device, with no network request and no server involved. It is not connected to any cloud AI service, and it adds no third party to the list below.

The model is given your question and, so that it can use names that exist, this database's table and column names and their declared types. It is never given a value from any row, the contents of a cell, a Cloudflare API token, or the CREATE TABLE text, which can carry default values and comments. Nothing it receives and nothing it produces leaves your device.

A drafted statement is only ever a SELECT, and it is placed in the query editor rather than run. You decide whether to run it.

Drafting is the only feature that uses a language model, and it needs Apple Intelligence, which requires a supported Apple Silicon Mac, iPhone or iPad. Everything else in D1Explorer works without it, and there is a switch in Settings to turn drafting off.

iCloud Sync

D1Explorer can keep your connections available on every device signed into the same Apple ID. This is handled by two independent settings in Settings → General, both enabled by default. Everything synced goes to your own iCloud account — never to us.

Turning either setting off keeps that data on the device it was created on. Because both use Apple's iCloud infrastructure, Apple's handling of it is governed by Apple's Privacy Policy.

Analytics and Tracking

The D1Explorer app does not include any analytics SDKs, tracking pixels, or telemetry. We do not track your usage patterns, feature usage, or any other behavioral data.

This website is separate from the app, and it does keep visitor statistics. It uses Cloudflare Web Analytics, which sets no cookie and stores nothing on your device — no identifier between page loads, no localStorage, and no fingerprinting of your browser or IP address. A visit is counted by looking at whether the page you came from was on this site, not by recognising you. Because nothing is written to or read from your device, this needs no consent banner under the ePrivacy Directive (in France, Article 82 of the loi Informatique et Libertés), and there is none.

Sent on each page view: the page address, the address you came from, your browser and operating system, your screen size, and page load timings. Cloudflare derives an approximate country from your IP address and does not pass the address itself to us. We see aggregate totals only — never a profile, never an individual, and never anything across other websites. Our lawful basis is legitimate interest in understanding how our own site is used; Cloudflare acts as our processor under its Data Processing Addendum. Any content blocker, or a browser Do Not Track setting, stops the script loading.

Crash Reporting

If you have opted in to share diagnostics with app developers through your device settings, Apple may share anonymized crash reports with us. This is controlled entirely by your privacy settings and can be disabled at any time in Privacy & Security → Analytics & Improvements (System Settings on the Mac, Settings on iPhone and iPad).

Third-Party Services

The App communicates only with:

We encourage you to review Cloudflare's Privacy Policy and Apple's Privacy Policy for details on how they handle your data.

Data Storage and Security

We employ the following security measures:

Children's Privacy

D1Explorer is not directed at children under the age of 13. We do not knowingly collect any personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Contact

If you have any questions about this Privacy Policy, please contact us at support@mgcrea.io.