Your directory.
Your business.

What stays on your Mac

Marten is a native Mac client for directory servers you choose. Connection profiles, bookmarks, saved searches, recent distinguished names, activity, and schema caches are stored locally in the app’s container. Passwords, OAuth secrets, and refresh tokens are stored in macOS Keychain and are accessible while your user account is unlocked.

Marten does not require a separate Marten account or provide a cloud sync service. The app includes no advertising, analytics, third-party crash-reporting, or telemetry SDK.

Connections you configure

Marten sends directory requests directly to the LDAP or PingDirectory REST server in your selected connection profile. Authentication requests go to the directory server or OAuth authorization and token endpoints you configure. These servers receive the credentials, queries, and changes needed to carry out your actions, and their administrators control their own processing and retention.

Directory content can include personal or confidential information. Use Marten only with directories you are authorized to access. For servers on your local network, macOS may request Local Network permission; Marten does not discover servers using Bonjour.

Optional Apple Intelligence

Ask Marten sends your natural-language search request to Apple Private Cloud Compute only after you allow it for the selected connection. The request excludes directory entries, schema, distinguished names, credentials, connection details, and executable LDAP filters. Marten builds the search locally and presents a read-only plan for your review before it runs. Information you type into the request itself is sent, so avoid including secrets or sensitive directory content.

Entry, schema, filter, and change explanations use Apple’s on-device model. Marten excludes known credential-like attributes, binary values, and operational attributes from explanation inputs. Other selected text may still contain sensitive information. System Writing Tools are available for description and title attribute values and may use on-device processing or Apple Private Cloud Compute according to your Apple Intelligence settings.

Prompts, model responses, explanation source facts, and generated search plans are excluded from Marten’s activity and diagnostic logs. You can withdraw Ask Marten permission by turning off “Allow Ask Marten to send request text for this connection” in its privacy details.

Siri, Spotlight, and Shortcuts

Marten makes connection, bookmark, and saved-search names available to Spotlight and system shortcuts. Its saved system catalog contains their identifiers and names, not bookmark distinguished names or saved-search queries. Credentials, schema contents, and live directory entries are not indexed in Spotlight.

An entry or schema definition currently visible in Marten can be made available transiently to Siri as on-screen content. Apple’s system privacy settings govern the system features you choose to use.

Local activity and diagnostics

Marten records local activity and diagnostic logs to help you understand operations and troubleshoot errors. Diagnostic details can include profile names, distinguished names, operation counts, and local file paths. Credential-like fields and common password or token forms are redacted, but logs should still be reviewed before you share them.

Activity displays the newest 500 events and stores at most 2,000 events. Recent-directory history keeps at most 100 distinguished names per connection. Session diagnostics retain at most 20 files, expire after 30 days, and limit each active log file to 5 MiB. Marten does not automatically upload these logs.

Files, retention, and deletion

Imports and exports access locations you select through macOS file controls. LDIF and CSV exports can contain directory information. Exported files remain wherever you save them, including any cloud-backed folder you choose, until you remove them.

You can remove saved connection profiles and their associated Keychain credentials in Marten, delete bookmarks and saved searches, and clear activity from the Activity tab. Saved metadata remains on your Mac until you remove it; diagnostic files follow the limits above. Removing a connection does not delete its server’s directory data or files you have exported.

Your directory administrator manages data retained by your directory and authorization servers. Contact that administrator for requests about those records.

This website

Cloudflare hosts and delivers this website. To serve pages and protect the service, Cloudflare processes technical request information such as your IP address, requested URL, browser information, and request time under its privacy policy.

This website does not add analytics scripts, advertising trackers, or cookies. Fonts and images are served with the site rather than loaded from third-party font or image services. Following an external link takes you to a service with its own privacy practices.

Information you send to support

If you contact support, your email address and the information you choose to send are used to respond to your request. Do not send credentials or unredacted directory content. Share only the details needed to explain the issue, and review any log excerpts or screenshots first.

Support correspondence is retained for as long as needed to resolve your request, maintain relevant support records, or meet legal obligations. You can request deletion of information you have sent by contacting support; information that must be retained for legal reasons may be kept for that purpose.

Questions and policy updates

Contact support with questions about this policy or your privacy choices. If Marten’s data practices change, this page will be updated with a revised date so you can review what changed.

Questions or requests.

For privacy questions or requests concerning information you have shared with the developer, email support@martenldap.com.

This policy will be updated when Marten’s data practices change. The date at the top identifies the latest revision.