Privacy Policy

App “Kerbside” · Last updated: November 2026

The app contains no advertising, no analytics and no tracking. As the developer I receive no data from the app. There is no server of mine that the app talks to.

Connections to your domain controllers

Kerbside connects only to the domain controllers of the domain you enter in a profile – either the server you specify or the ones your domain’s DNS lists. For this the app queries the DNS servers your Mac uses. Your user name, password and everything you read or change go only to these domain controllers, and always encrypted: over LDAPS (TLS) or over Kerberos with encryption. With Kerberos the app receives a ticket from the domain controller; it keeps it in its own memory for the current connection only and doesn’t put it into your Mac’s ticket cache. For servers on your network, macOS asks for local network access. During setup the app checks, without signing in, whether the domain controller offers LDAPS with a valid certificate.

Data on your Mac

The app stores connection profiles (name, domain, optionally a fixed server and site, sign-in method, user name and, if needed, your company’s root certificate) and its settings on your Mac. Passwords are stored only if you choose so, and then in the keychain. The app also remembers which domain windows were open and which OU or overview you looked at last. What you read in the directory is only displayed and not stored permanently.

Change log

Every change you make in the directory with Kerbside is written to a log on your Mac: time, connection name, signed-in user, action, affected object (distinguished name) and result. Passwords are never included. The log doesn’t leave your Mac.

Clipboard and Touch ID

The app copies a new password only when you tap the button. It marks it as confidential so clipboard history apps don’t keep it, and removes it from the clipboard after 60 seconds and when you quit. Before a password reset the app asks for Touch ID or your Mac password; macOS checks this, and the app only learns whether the confirmation succeeded.

Contact by email

If you email me, I use your address and message only to answer your request.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing and objection, and the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at). You delete profiles in the app’s settings; this also removes a saved password from the keychain. Profiles, settings and the change log live in the app’s folder on your Mac (~/Library/Containers/at.bumberger.kerbside). macOS doesn’t always remove this folder when you delete the app; you can then delete it yourself.

Controller

Christian Bumberger
Falkenweg 12
4050 Traun, Austria
support@bumberger.at