Ugh! Storage: Private Cloud

About Ugh! Storage: Private Cloud

Welcome to Ugh! Storage 2.0 — the biggest reliability and polish release since launch. Setup is smoother, uploads are more resilient, the macOS app feels properly native, and we've hardened privacy end-to-end. SMOOTHER SETUP Signing in now routes you straight into a guided device-pairing flow instead of dropping you into an empty app. If you re-install or sign in on a new device, the same flow walks you back through connecting to your Pi. The "Invalid server URL" dead-end is gone. FASTER BROWSING • Thumbnails debounce during fast scrolling so your Pi and your battery aren't hammered fetching images you've already scrolled past • Encryption for large uploads moved off the main thread — a 500 MB video no longer freezes the UI • Memory-cached access tokens make file grids snappier BACKGROUND UPLOADS THAT ACTUALLY RUN Uploads queued before you close the app now finish in the background while you sleep, instead of waiting for you to reopen. A missed system declaration was silently disabling this — fixed. RELIABILITY • Upload queue survives crashes (atomic writes) • Share extension safely rejects oversized files instead of crashing • Share sheet auto-recovers when your access token refreshes mid-batch • Undo on "moved to trash" now tells you if it fails instead of silently swallowing the error • Empty Trash disables during the request — no more accidental double-taps macOS, PROPERLY NATIVE • Closing the main window no longer strands you — reopen from the Window menu or by clicking the dock icon • Toolbar controls use native macOS placement (primary-action / cancellation-action) • Biometric prompt uses macOS-appropriate language ("Authenticate…" instead of "Unlock…") • Share sheet uses the correct key-window lookup instead of a deprecated API WIDGET • Tap the storage widget to jump straight into the app • Widget clears itself on logout so a shared device never shows the previous user's stats PRIVACY & SECURITY • Biometric lock prefers Face ID / Touch ID only — won't fall back to device passcode • Lock engages when the app becomes inactive, hiding content from the app-switcher preview • Manual server URL entry enforces HTTPS (private LAN addresses still allowed) • Full logout wipe: device name, theme preference, photo-backup history, AI-derived metadata — nothing leaks to the next user • Apple Privacy Manifest added (2024+ requirement) • Sentry crash-report breadcrumbs scrub any credential-shaped keys before transmission • Client-side path validation rejects traversal attempts before they reach your Pi ACCESSIBILITY • Toasts ("upload complete", "moved to trash", "couldn't restore") now announce to VoiceOver • Global search progress updates announce as they change ("Searching…" / "Thinking…") • Photo scrubber announces the current month as you drag • Dynamic Type capped at xxxLarge so extra-large text settings can't break layouts UNDER THE HOOD • Swift strict concurrency enforced across the entire project • AI metadata, upload staging, and offline cache excluded from iCloud backups (saves GB on restore) • Widget and Share extensions sync properly with the main app after token refresh • Over 40 individually reviewed hardening fixes Thanks for using Ugh! Storage. Your feedback shapes every release — keep it coming.

App privacy

The developer, Honorius Neogy, reported these privacy practices to Apple.