Trust

what it can
and cannot reach

This app rewrites your files. That deserves a page rather than a sentence.

Your files never leave your Mac

Suffix contains no network code at all. Conversion uses only what ships with macOS — ImageIO, PDFKit, AVFoundation and Vision.

There is no account, no service, and nothing to sign in to. Do not take that on faith:

git clone https://github.com/PewPewBiches/Suffix.git
cd Suffix && ./Scripts/build-app.sh
ItemCount
Network requestsnone
Telemetry, analyticsnone
Accountsnone
Bundled binariesnone
Source publishedall of it, MIT
It only acts on a deliberate rename

Not on files you copy, download or move. Only when you change a file's extension yourself, to something suffix can produce, and the contents do not already match.

Skipped entirely

Photos libraries, Photo Booth, Music, iMovie and Final Cut libraries, application bundles, caches, node_modules, .git, and the Trash. A Photos library is a database, not loose files — rewriting anything inside would corrupt it.

Nothing is destroyed

Before anything is overwritten the original is copied aside and kept for seven days, so any conversion can be undone from the menu bar. Stored originals expire on their own rather than growing forever.

Why macOS says it is unidentified

Because it is unsigned.

Gatekeeper blocks the first launch and says the app “cannot be verified”. That is a statement about the missing signature, not about what the app does. Open System Settings → Privacy & Security and click Open Anyway; you do it once.

The same gap means suffix cannot use Notification Center — macOS refuses authorization without a signing identity — so it draws its own notice instead.

The permission it asks for

Full Disk Access, so it can reach Desktop, Documents and Downloads.

Without it suffix keeps running and silently does nothing in exactly the folders you use most — which is worse than failing, because it looks like it is working.

Do run the test

A silent, healthy-looking failure is this app's characteristic way of going wrong. Setup ends in a test it button that converts a real file and shows you the result — it catches the problem while you are still paying attention, instead of three days later.

The keyboard shortcut additionally asks Finder what you have selected, which macOS prompts for separately. Declining costs you the shortcut and nothing else — right-click still works.