OPS WatchOPS Watch Privacy Policy
Publisher: Cognito Agora, Inc. · Effective date: November 11, 2026 · Questions: support@cognitoagora.com
The short version
OPS Watch watches your Mac for signs of intrusion and tells you what it found. Everything it records stays on your Mac. We do not collect, sell, or see your data. There are no ads, no analytics, no tracking, and no crash reporting.
What OPS Watch looks at, and what it keeps
OPS Watch keeps its records in a private folder on your Mac that only your account can open.
Programs and files. OPS Watch uses Apple's Endpoint Security to watch for warning signs. Examples are a program launched from Downloads, an unsigned program, many personal files opened at once, a change to the items that start with your Mac, or a remote login. When something matches, it records the program, the file path, and the time. It never opens or reads what is inside your files.
Network connections. OPS Watch uses Apple's Network Filter to see which app is connecting to which address and port. It never reads what is sent or received. It notes only connections that look suspicious.
Regular checks, every 5 minutes. OPS Watch reads sign-in attempts from the system log, running programs and their connections, the names of recently downloaded archives, file names and dates in your Documents, Desktop, and Downloads folders (to spot ransomware), your Wi-Fi network name and router details, the admin accounts, and connected USB devices.
Login Photo (off unless you turn it on). If you switch it on, OPS Watch uses your camera to take one photo when someone fails to sign in at this Mac. macOS asks your permission first. Photos stay on your Mac and are deleted after 14 days, or after the number of days you choose (1 to 90).
How long we keep it
Closed alerts and scan history are deleted after 90 days. Alerts that are still open stay until they are resolved. OPS Watch's activity logs have a size limit and replace their oldest entries.
What leaves your Mac
A connection check. To tell whether you are online, OPS Watch briefly connects to a public internet address (1.1.1.1 or 8.8.8.8). It sends no information.
Apple's own checks. When OPS Watch checks whether a program is signed, macOS may contact Apple. That is part of macOS, not OPS Watch.
Nothing else. OPS Watch does not send your alerts, files, or activity to us or to anyone else. It does not use outside AI or reputation services; its checks run on your Mac.
Your control
OPS Watch never blocks, moves, or deletes anything unless you confirm it. If you confirm a block, OPS Watch adds it to the macOS firewall. Automatic blocking is off unless you turn it on. You can quit OPS Watch at any time, and removing the app stops all monitoring.
Children
OPS Watch is not directed to children under 13 and collects no personal information from them.
Changes
If we change what OPS Watch collects or sends, we will update this page before that version is released and change the date above.