Your models stay on your Mac.

What ModelShelf accesses, and why

The macOS app is sandboxed. Access to your collection comes from the files and folders you choose in macOS dialogs; it does not require Full Disk Access.

The app does not request access to your camera, microphone, contacts, calendars, location or screen recording. Outgoing network access is enabled for the manual update checker; incoming connections are not enabled.

AI suggestions run on your Mac

AI Rename, AI-generated model tags, library search descriptions and AI-assisted web search descriptions use Apple’s on-device Foundation Models with the model’s preview and available descriptive metadata. ModelShelf does not send this material to a cloud AI service. You review suggestions before applying names, saving tags or library descriptions, or starting a web search. Preparing AI Search is optional; typing in library search matches the saved words without sending a request to AI.

AI features need a supported Mac with Apple Intelligence enabled and its model available. Apple manages the operating system’s model downloads and its own privacy settings. Manual naming, tags and search terms remain available without AI.

When information leaves the app

• Search Web: your reviewed search text, the phrase “3D printable model”, and any selected site filter are placed in a Google search URL opened in your browser. ModelShelf does not upload the model or preview. Search text may contain information from a suggested description, so review it first. Google and your browser may process the query, IP address, cookies and browser information under their own policies.
• Author and website links: links open in your browser when you choose them. ModelShelf does not visit embedded author links merely to display model metadata. The destination site receives a normal browser visit.
• Opening a slicer: the chosen slicer receives access to the file you open. Its own online services and privacy settings apply. ModelShelf itself does not send models directly to a printer.
• Email feedback: an email link opens your email app. Nothing is sent automatically. If you send a message, your email address, message and any attachments you choose are available to the ModelShelf feedback mailbox and handled by the email providers involved so we can receive and respond. ModelShelf does not automatically attach files, diagnostics or screenshots.

What is kept locally

ModelShelf saves interface preferences such as layout, window and preview sizes, the last file-format tab, and text size. It also keeps macOS permission bookmarks for the selected collection folder and any authorised slicer preset folders, so they can be reopened without asking every time.

Imported printer settings are saved in ModelShelf’s Application Support area. Preview caches and temporary working files are used during processing; temporary conversion and OBJ working files are scheduled for removal when the operation finishes. Exported projects remain where you save them and can retain source author information, links and other project metadata. Consider that metadata before sharing a converted file.

Preferences and imported profiles persist between launches until changed or removed. Uninstalling an app may leave local support files. Your model collection and exported copies remain under your control. If you want help clearing saved app data or remembered access, contact us below. Any backup or cloud sync you have configured for your folders is managed by that service, independently of ModelShelf.

Favourites, print status, notes and tags

ModelShelf stores your favourite marks, print status, notes, reviewed tags and saved search descriptions in its local Application Support collection.json file, together with file paths and file identity information to associate them with the correct model. These details are not written into model files or uploaded. They remain on this Mac until you clear them or remove the local collection data; normal Mac backups may also contain them. Back Up & Restore lets you export these details, including file paths, to a JSON file at a location you choose. Before replacing an existing database, ModelShelf saves a local safety copy in its Application Support Collection Backups folder. Exported backups and safety copies remain until you delete them; ModelShelf does not upload them. A cloud-synced destination you choose may be synced by its own service. Details are retained when a model is moved to Trash so restoring the same file to the same location can recover them.

Manual update checks

Choosing Check for Updates contacts https://modelshelf.app/updates.json over HTTPS to read the published release information. Checks run only when requested, with no automatic background polling. The request contains no model files, previews, personal identifier or installed app version, and uses no cookies or saved login credentials. The website host receives standard connection information, including your IP address and the update-check user agent, and may record it in server logs.

The app compares versions locally. Download Update opens a versioned download link in your browser; the website may count that download request as described below. ModelShelf does not automatically download, install or replace the app.

This website

These pages use local images and system fonts. The website includes self-hosted statistics for page views, estimated daily visitors and download requests by app version. These figures are available only in a password-protected administrator dashboard. The statistics do not track activity inside the ModelShelf app or upload model files. There are no advertising trackers, embedded third-party analytics services or visitor cookies set by the page code.

The page counter sends only the page’s fixed name and a random request identifier to this website’s server. It does not send URL query strings, page titles or referrer information. To estimate visitors within a UTC day, the server processes the connection’s IP address and browser user-agent string into a keyed identifier that changes each day. The statistics database does not retain the original IP address or user-agent string. Temporary visitor and request identifiers older than two days are removed when another counted request is processed; without further activity they remain until cleanup. Aggregate daily counts contain no visitor identifiers and are retained until the site owner deletes them.

Download statistics record the requested release version. They count requests through the download link, not completed downloads, installations or use of the app. Recognised bots and requests signalling Do Not Track or Global Privacy Control are excluded, but counts are estimates. Blocking JavaScript or the counter also prevents page counting. The private dashboard uses the hosting provider’s password protection; your browser may retain the administrator login until its authenticated session ends.

When the site is hosted, its hosting service may process standard request information such as your IP address, browser details and requested pages to deliver the site and maintain security. This policy does not claim that hosting or email providers keep no logs. Links to external websites and email use the services you choose.

ModelShelf does not include its own automatic crash-reporting service. macOS and third-party applications may handle diagnostics according to their own settings.