Offline architecture
The desktop app performs its core work locally. There is no OrbitDrop conversion API, cloud file bucket, user database, or account service. The app does not need a persistent connection after installation.
- Files are opened from locations you select.
- Outputs are written beside the source under a new name.
- No telemetry or analytics SDK is included.
- No original is intentionally overwritten.
Installer integrity
Every published release includes SHA-256 checksums. A checksum lets you confirm that your downloaded file exactly matches the published installer.
From version 0.6.0 onward, the built-in updater performs this checksum check automatically before replacing the app. It also verifies the target version and restores the previous working copy if replacement fails.
See the verification guide or open the current checksum directory.
Signing status
The current early release is unsigned. macOS Gatekeeper or Microsoft Defender SmartScreen may therefore ask you to confirm before opening it.
Do not continue if a file came from another website or if its checksum does not match. Platform code signing and notarization are planned for a later release.
Operating-system permissions
OrbitDrop needs access to the files you choose so it can read the source and create an output in the same folder. macOS and Windows may ask for folder access based on your privacy settings. OrbitDrop does not request unrelated contacts, camera, microphone, or location data.
Safe use
Keep a backup of important work, download only from the official OrbitDrop site, verify checksums for sensitive environments, and keep your operating system security updates enabled. Do not process an untrusted file if your operating system or antivirus tool flags it as malicious.