This policy covers the NAS Sentinel macOS application, the nassentinel.com website, and the support service. It explains what data may be processed, why it is processed, and how it is protected.
Built for Mac
Multi-NAS
Privacy by design
Last updatedVersion 1.0
1. Introduction
Protecting your data and respecting your privacy are fundamental principles of NAS Sentinel.
NAS Sentinel is a macOS application designed to monitor the health, availability, and performance of compatible NAS devices. Its architecture follows a local-first approach: the main discovery, monitoring, analysis, and notification operations run locally on your Mac and private network.
Using the main features of NAS Sentinel V1.0 requires neither a NAS Sentinel account nor a proprietary cloud service.
This policy explains what data may be processed when you use the NAS Sentinel application, visit our website, or contact support. It also describes the safeguards applied, the third-party services involved, and your rights.
2. Data controller
NAS Sentinel is software published by BRANDS° Studio in Switzerland.
The official website is nassentinel.com. For privacy questions or to exercise your rights, use the Support form and select “Privacy & personal data”.
The data processed depends on how you use the application, website, and support service.
3.1 Equipment monitoring data
NAS Sentinel accesses technical information made available by your monitored devices, including:
NAS identification and characteristics.
Network addresses, host names, and connection information.
Device availability status.
Component and disk temperatures.
Disk and storage-volume status, and available RAID information.
Total, used, and available capacity.
Network-interface activity.
Information relating to compatible uninterruptible power supplies.
Events, alerts, and local monitoring history.
3.2 Settings and preferences
The application stores on your computer the information needed for it to operate, including:
Discovered and registered devices.
Display and notification preferences.
Custom alert thresholds and monitoring settings.
Network configuration information.
Events and historical data stored locally.
3.3 SNMP connection information
NAS Sentinel uses the SNMP protocol, among others, to query compatible devices. Confidential connection information, such as configured SNMP community strings, is stored in macOS Keychain.
NAS Sentinel does not require SNMP to be publicly accessible over the Internet. Remote access relies on an existing private connection, such as Tailscale or a VPN configured and controlled by the user.
3.4 Purchase and licence data
NAS Sentinel uses the Mac App Store and StoreKit 2 to offer its commercial editions and verify the associated entitlements. Purchases are made through Apple.
NAS Sentinel does not directly collect your bank or payment-card details. The application uses only the entitlement information needed to determine which features are available. Data linked to your Apple account and transactions is processed by Apple under its own terms and policies.
Data is used only to the extent necessary for the relevant purposes.
In the application, it is used to discover and monitor devices, present their status, identify supported anomalies, display recommendations, send notifications, retain events locally, and manage licences.
For the website, it is used to deliver requested pages, secure hosting, and operate the service. For support, it is used to receive and handle requests, communicate with users, and resolve reported issues.
We do not sell personal data submitted to support. Local monitoring data is not used by the publisher for advertising, profiling, or marketing.
5. Local operation and data transmission
5.1 Local processing
The main monitoring operations run locally. Information collected from NAS devices is used directly by the application installed on your Mac.
Core operation does not depend on a NAS Sentinel cloud infrastructure, and the publisher does not automatically receive data from your NAS devices.
5.2 Network communications
The application communicates with configured devices using supported network protocols, over your local network or through a private remote connection that you control.
The level of protection depends on the protocol used and the security of the underlying network. In particular, unencrypted versions of SNMP do not by themselves provide cryptographic protection for communications. We recommend limiting device access to authorised networks and devices and using a secure private connection for remote access.
5.3 External services
Some features communicate with Apple services required for purchases, licences, and system functions used by the application. This processing is separate from local NAS monitoring.
6. The nassentinel.com website
The official NAS Sentinel website is a static website hosted on Cloudflare Pages. When you visit it, Cloudflare may process the technical information needed to deliver pages and protect the service, including:
The visitor’s IP address.
The date and time of requests.
The requested resources.
Selected browser headers and technical information about the browser and connection.
NAS Sentinel deploys no advertising or analytics cookies and uses neither Google Analytics nor Meta Pixel.
Cloudflare and Turnstile may use strictly necessary cookies, local storage, or other technical signals to secure the website and distinguish a person from automated traffic. Their use depends on how these security services operate and are configured; the website therefore does not claim to be entirely cookie-free.
7. Support and communications
When you use the Support form, you choose the information you submit: optional name, email address, subject, macOS version, NAS model, DSM version, network path used, and a description of the observed signal.
The form does not automatically collect data from your NAS, accept attachments, or subscribe you to a newsletter. It does not create a user account.
Cloudflare Turnstile evaluates the submission to prevent abuse. A Cloudflare Worker validates the fields and sends a plain-text message, using Cloudflare Email Service, to the support mailbox hosted in Microsoft 365. The website and Worker do not store the message content in a database, and the Worker does not log the request body, full email address, or Turnstile token.
To resolve an issue, we may ask for information about your technical environment. Never submit a password, SNMP community string, private key, or other authentication secret.
Whenever possible, anonymise or redact technical information before submitting it.
8. Providers and recipients
The main external providers involved in NAS Sentinel V1.0 services are:
Apple — distribution, purchases, licences, and system services.
Cloudflare — domain, website hosting, security, Turnstile, Worker, and form transmission.
Microsoft — hosting of the support mailbox in Microsoft 365.
Limits on sharing
These providers may process certain information under their own terms, their respective responsibilities, and applicable law.
Local NAS monitoring data is not sent to these providers solely to perform the core monitoring functions.
9. International transfers
Apple, Cloudflare, and Microsoft operate international infrastructure and services. Depending on the service and its configuration, some data related to the website, support, or Apple services may be processed outside Switzerland or the European Economic Area.
Where required by applicable law, such transfers rely on the safeguards or legal mechanisms provided by the relevant providers. A server’s location alone does not guarantee that the data is subject exclusively to the jurisdiction of the country in which it is located.
This policy therefore does not guarantee exclusively Swiss or European hosting.
10. Retention
Information is retained only for as long as necessary for the purposes for which it is processed, subject to applicable legal obligations.
Application data
Configuration and monitoring data remains locally on your Mac until you remove it using the corresponding application or system controls.
Some information required to manage trial periods and licences may be retained locally to preserve the integrity of entitlements.
Support data
Correspondence is retained in Microsoft 365 while needed to handle the request and any reasonably expected follow-up. It may be retained longer when needed to document support, a purchase, or a licence response; comply with a legal, accounting, or security obligation; manage a dispute; defend rights; or investigate an incident.
When those needs no longer apply, the information is deleted or anonymised under the mailbox-management rules and any applicable retention obligations.
Website and security data
Turnstile tokens are used to validate a submission and are not stored by NAS Sentinel in a database. Any technical logs, security metadata, and delivery data retained by Cloudflare or Microsoft follow their applicable configurations and retention policies.
The website and Worker do not introduce an additional durable copy of support requests.
11. Information security
We take an approach designed to limit the data processed and reduce its exposure. The main measures include:
Local processing of monitoring information.
Use of macOS Keychain for relevant connection secrets.
Separation of the local monitoring engine from the commercial website.
Use of HTTPS for the website.
Server-side validation, allowlists, size limits, and Cloudflare Turnstile for the form.
A restricted email destination and no support database on the website.
Limited technical information requests and no attachments.
Shared responsibility
No computer system or electronic transmission can guarantee absolute security.
The security of the NAS devices, local network, Mac, and private connections used with NAS Sentinel also depends on how the user configures, updates, and maintains them.
12. Legal bases for processing
Swiss data-protection law applies to situations within its scope. Where the General Data Protection Regulation (GDPR) applies, each processing activity relies on an appropriate legal basis.
Performance of a contract or pre-contractual steps, to provide the product, manage entitlements, or respond to a support request.
The publisher’s legitimate interest in operating and securing the website, preventing abuse, providing support, and defending its rights, subject to the interests and rights of the people concerned.
Compliance with a legal obligation, when certain information must be retained or disclosed under applicable law.
Consent, when it is required for a specific purpose. NAS Sentinel currently uses no non-essential advertising or analytics technology requiring such consent.
13. Your rights
Depending on applicable law and your circumstances, you may be entitled to:
Request access to personal data processed about you.
Request correction of inaccurate data.
Request deletion of certain data.
Object to certain processing or request that it be restricted.
Request data portability where the legal conditions are met.
Withdraw consent where processing is based on consent.
Lodge a complaint with the competent data-protection authority.
Exercising your rights
Use the Support form and select “Privacy & personal data”. We may request reasonable verification of your identity before disclosing, correcting, or deleting information.
We will review your request under applicable law.
14. Children’s data
NAS Sentinel is technical software designed to monitor computer equipment. It is not designed to collect children’s personal data.
If we become aware that information about a child has been submitted to support without appropriate justification, we will consider the necessary steps under applicable law.
15. Third-party services and external links
The NAS Sentinel website may contain links to external services, including the Mac App Store and technical documentation websites.
When you access a third-party service, data you provide to it is governed by that service’s terms and privacy policies. We recommend reviewing them before submitting personal data.
16. Future development of NAS Sentinel
NAS Sentinel may evolve to offer new features, platforms, or complementary services. Such developments may require additional processing or new providers.
Features not available in NAS Sentinel V1.0 are not described here as processing currently performed. If a development materially changes the nature or purposes of the data processed, this policy will be updated before or when that change is introduced, as required by applicable law.
17. Changes to this policy
We may amend this policy to reflect technical, functional, organisational, or regulatory changes.
The update date and version are shown at the top. Material changes may be accompanied by additional notice where necessary or appropriate. The version published on the official website is the reference version at the time it is viewed.
18. Contact us
For questions about this policy or the processing of your personal data, use the Support form and select “Privacy & personal data”.
