Last updated: October 29, 2026
DbCat is a desktop database client. This policy explains what the app and the website dbcat.forzens.com do with your information. The short version: your data stays on your computer and in your databases. DbCat has no accounts, no ads and no tracking.
The app
Your databases and data. DbCat connects only to the databases you configure. Queries, results, table data and connection settings stay on your computer and are never sent to us.
Passwords. Database passwords, SSH passwords and private key passphrases are stored only in the macOS Keychain or Windows Credential Manager. They are never written to config files or logs, and never leave your computer except to sign in to your own servers.
No telemetry. The app does not collect usage statistics, crash reports or analytics.
Update checks. To find new versions, DbCat periodically downloads a public update feed. When it downloads an update, our download server counts the download (app version, platform and country) so we know how many people are updating. We don’t store IP addresses, and these counts can’t be used to identify you.
Microsoft sign-in. If you choose Microsoft Entra ID authentication for SQL Server, DbCat signs you in with Microsoft. That sign-in is between you and Microsoft and is covered by Microsoft’s privacy policy.
AI tools (MCP). The built-in MCP server is off by default. When you enable it for a connection, the AI tool you connect (for example Claude Code or Cursor) can read the data that connection allows, and that data is then handled by that tool and its provider under their own policies. Your database passwords are never shared with AI tools.
Reporting issues. “Report Issue” opens a new GitHub issue in your browser with the app and OS versions filled in. Nothing is sent until you submit it yourself, and what you submit is public on GitHub.
The website
The website uses Cloudflare Web Analytics to count page views. It does not use cookies and does not track you across sites. When you click a download button, we count the click (country, language and page) to understand which downloads people choose. We don’t store IP addresses. These counts are kept for up to 90 days.
The website and downloads are served by Cloudflare, and release archives and the issue tracker are hosted on GitHub. Both may keep standard server logs under their own privacy policies.
Sharing
We don’t sell, rent or share personal information. We don’t run ads.
Children
DbCat is a developer tool and is not directed at children.
Changes
If this policy changes, we will update this page and the date at the top.
Contact
Questions about privacy: dbcat@forzens.com