Privacy

TOTEMGet collects nothing. There is no account, no analytics, no telemetry, no crash reporting and no identifier of any kind. This page explains exactly what the app and the browser extension touch, and why.

Last updated 12 September 2026 · Oceanic Consulting VOF, Poortugaal, the Netherlands · KVK 84553081

The short version

• Nothing about you, your downloads, or the sites you visit is sent to us or to anyone else.
• The browser extension sends the download's address and that site's cookies to TOTEMGet on your own computer, at 127.0.0.1. That address never leaves your machine.
• Site passwords you save are stored in your macOS Keychain and sent only to the host they belong to.
• The one request the app makes on its own is an update check. It carries no identifier and can be switched off.
• We run no servers that receive your data, so there is nothing for us to sell, share, or hand over.

The browser extension

The extension exists for one reason: a download link on its own is worthless on any site that checks a session. To hand a download to TOTEMGet in a way that still works behind a login, the extension has to pass along what the browser would have sent itself.

What it reads	Why	Where it goes
The download's URL and suggested filename	It is the file to fetch	TOTEMGet at 127.0.0.1:47810
Cookies for that URL	Without the session cookie the server returns a login page instead of the file	TOTEMGet at 127.0.0.1:47810
The referring page address and the browser's user agent	Many hosts refuse a request that arrives without them	TOTEMGet at 127.0.0.1:47810
Your extension settings	File-type filter, excluded sites, minimum size	Chrome's own synced storage for the extension

It reads cookies only for the address of a download you started, at the moment you start it. It does not read cookies in the background, does not browse your history, does not inject anything into pages, and contains no remote code — everything it runs is in the package you installed.

When TOTEMGet is not running the extension does nothing at all and the browser downloads normally.

The bridge on your machine

TOTEMGet listens on 127.0.0.1:47810, which is reachable only from your own computer. Requests that arrive carrying a web page's Origin are refused, and every request that queues a download must carry a custom header that a page cannot send cross-origin without a preflight the app declines. A malicious website therefore cannot queue downloads on your machine even though the port is open locally.

The app

• Downloads go to the servers whose addresses you give it, and nowhere else.
• Site logins you save live in your macOS Keychain. They are never written to a settings file, a sidecar, or the diagnostics log, and are sent only to the host they were saved for.
• The diagnostics log (~/Library/Logs/TOTEMGet) records the response headers servers send back, so a failing download can be understood. It stays on your computer and is written only so you can share it if you ask for help.
• The update check contacts update.totemget.com to ask whether a newer version exists. It sends nothing but that request — no identifier, no account, no information about you or your downloads. The most that can be inferred is that some copy of TOTEMGet somewhere asked the question. You can switch it off in Settings → Updates.
• Optional tools. When you enable video pages or archive unpacking, TOTEMGet runs yt-dlp, ffmpeg or an unarchiver that you installed yourself. Those are separate programs with their own behaviour; TOTEMGet does not bundle them.

What we never do

• No advertising, and no advertising identifiers.
• No selling or sharing of data — we have none to sell.
• No use of anything for anything unrelated to downloading the file you asked for.
• No remote code: neither the app nor the extension downloads code to run.

Your rights

Because nothing is collected, there is no personal data of yours for us to access, correct, export or delete. Everything the software stores is on your own machine: delete the app, its preferences, and any Keychain entries you created, and nothing remains.

If you believe otherwise, or want to report a security problem, write to [email protected]. For anything else, [email protected].

Changes

If this ever changes materially, the date at the top changes with it, and the change is described in the app's terms, which you are asked to accept again.