Every app and site Rolltop knows

This list is made from the same file the app ships, so it is always exactly what Rolltop knows. A file from an app or site that isn’t here is still explained: Rolltop says what macOS recorded.

Apps that save downloads

macOS notes which app saved a download. Rolltop says it in these words.

Browsers

• Arc: “Saved by Arc”.
• Brave: “Saved by Brave”.
• Chrome: “Saved by Chrome”.
• Chromium: “Saved by Chromium”.
• DuckDuckGo: “Saved by DuckDuckGo”.
• Edge: “Saved by Edge”.
• Firefox: “Saved by Firefox”.
• Opera: “Saved by Opera”.
• Orion: “Saved by Orion”.
• Safari: “Saved by Safari”.
• Vivaldi: “Saved by Vivaldi”.
• Zen: “Saved by Zen”.

Chat apps

• Discord: “Saved from Discord”. Sent to you, so it’s your call: it may still be in Discord, with the message it came in.
• Messages: “Saved from Messages”. Sent to you, so it’s your call: it may still be in Messages, with the message it came in.
• Signal: “Saved from Signal”. Sent to you, so it’s your call: it may still be in Signal, with the message it came in.
• Slack: “Saved from Slack”. Sent to you, so it’s your call: it may still be in Slack, with the message it came in.
• Teams: “Saved from Teams”. Sent to you, so it’s your call: it may still be in Teams, with the message it came in.
• Telegram: “Saved from Telegram”. Sent to you, so it’s your call: it may still be in Telegram, with the message it came in.
• WhatsApp: “Saved from WhatsApp”. Sent to you, so it’s your call: it may still be in WhatsApp, with the message it came in.
• Zoom: “Saved from Zoom”. Sent to you, so it’s your call: it may still be in Zoom, with the message it came in.

Mail apps

• Airmail: “Saved from an email in Airmail”. Sent to you, so it’s your call: it may still be in Airmail, with the email it came in.
• Mail: “Saved from an email in Mail”. Sent to you, so it’s your call: it may still be in Mail, with the email it came in.
• Mimestream: “Saved from an email in Mimestream”. Sent to you, so it’s your call: it may still be in Mimestream, with the email it came in.
• Outlook: “Saved from an email in Outlook”. Sent to you, so it’s your call: it may still be in Outlook, with the email it came in.
• Spark: “Saved from an email in Spark”. Sent to you, so it’s your call: it may still be in Spark, with the email it came in.

AirDrop

• AirDrop: “Sent by AirDrop”. Sent to you, so it’s your call: whoever sent it may still have it.

Other apps

• Cyberduck: “Saved by Cyberduck”.
• Figma: “Exported from Figma”.
• Notion: “Saved from Notion”. Sent to you, so it’s your call: it may still be in Notion, with the message it came in.
• Transmit: “Saved by Transmit”.
• Trello: “Saved from Trello”. Sent to you, so it’s your call: it may still be in Trello, with the message it came in.

Apps that make files

• ChatGPT: “Saved from ChatGPT”.
• Claude: “Saved from Claude”.
• Excel: “Saved by Excel”.
• Keynote: “Exported from Keynote”.
• Numbers: “Exported from Numbers”.
• Pages: “Exported from Pages”.
• PowerPoint: “Saved by PowerPoint”.
• Shortcuts: “Saved by one of your shortcuts”.
• TextEdit: “Saved by TextEdit”.
• Word: “Saved by Word”.

Cloud storage apps

• Box: “Saved from Box”.
• Dropbox: “Saved from Dropbox”.
• Google Drive: “Saved from Google Drive”.
• OneDrive: “Saved from OneDrive”.

Part of macOS

• Archive Utility: “Unpacked by Archive Utility”.
• Preview: “Saved by Preview”.

Sites where you can probably download it again

Only for these known public download sites does Rolltop say “You can probably download it again”. It never guesses from an address.

• 1Password (downloads.1password.com)
• Discord (dl.discordapp.net)
• Docker (desktop.docker.com)
• Figma (desktop.figma.com)
• GitHub (codeload.github.com)
• GitHub releases (github.com/…/…/releases/download/)
• Google (dl.google.com)
• HashiCorp (releases.hashicorp.com)
• JetBrains (download.jetbrains.com)
• Logitech (download01.logi.com)
• Microsoft (download.visualstudio.microsoft.com)
• Mozilla (download.mozilla.org)
• Node.js (nodejs.org/dist/)
• npm (registry.npmjs.org)
• PyPI (files.pythonhosted.org)
• Python (www.python.org/ftp/)
• Raspberry Pi (downloads.raspberrypi.com)
• Slack (downloads.slack-edge.com)
• Spotify (download.scdn.co)
• VideoLAN (get.videolan.org)
• Visual Studio Code (update.code.visualstudio.com)
• Zoom (cdn.zoom.us)

Sites that need a sign-in

A file from one of these is your call: the site needs you to sign in to download it again.

• App Store Connect (appstoreconnect.apple.com)
• Apple Developer (developer.apple.com)
• Apple Developer (download.developer.apple.com)
• AWS console (console.aws.amazon.com)
• Box (box.com)
• Canva (canva.com)
• ChatGPT (chatgpt.com)
• Claude (claude.ai)
• Dropbox (dropbox.com)
• Gmail (mail.google.com)
• Google (googleusercontent.com)
• Google Cloud console (console.cloud.google.com)
• Google Docs (docs.google.com)
• Google Drive (drive.google.com)
• Google Drive (drive.usercontent.google.com)
• iCloud (icloud.com)
• Notion (notion.so)
• OneDrive (onedrive.live.com)
• SharePoint (sharepoint.com)
• Slack (slack.com)
• Slack (files.slack.com)
• Teams (teams.microsoft.com)
• Trello (trello.com)
• Vercel (vercel.com)

This Mac and your network

A file from this Mac or your own network may be your only copy.

• this Mac (localhost)
• this Mac (127.0.0.1)
• your network (local)
• Any address starting 10., 192.168., 172.16., 172.17., 172.18., 172.19., 172.2, 172.30., 172.31., 169.254.

Temporary links

A link that carried a signature has expired by now, so the file may be your only copy. Rolltop spots one by these parts of its address: x-amz-signature, x-amz-credential, x-goog-signature, x-goog-credential, googleaccessid, signature=, sig=, token=, expires=, se=, x-ms-signature.

Kinds of file

• Installer (.dmg, .pkg, .mpkg, .xip): An installer for an app.
• Disk image (.iso, .img, .sparseimage): A disk image, which may hold an installer or a backup.
• Archive (.zip, .tar, .gz, .tgz, .bz2, .xz, .7z, .rar): A compressed archive.
• Private key (.p8, .p12, .pfx, .pem, .keystore, .jks, .ovpn, .env): A private key or other secret.
• Keynote or private key (.key): A Keynote presentation, or a private key if it’s very small.
• Certificate (.cer, .crt, .der): A certificate. Certificates are public, unlike private keys.
• Provisioning profile (.mobileprovision, .provisionprofile): A provisioning profile, used to build apps.
• PDF (.pdf): A PDF.
• Document (.doc, .docx, .pages, .rtf, .odt, .epub): A document.
• Spreadsheet (.xls, .xlsx, .numbers, .csv, .tsv, .ods): A spreadsheet.
• Presentation (.ppt, .pptx, .odp): A presentation.
• Image (.png, .jpg, .jpeg, .heic, .gif, .webp, .tiff, .tif, .bmp, .svg, .avif): A picture.
• Video (.mp4, .mov, .m4v, .webm, .mkv, .avi): A video.
• Audio (.mp3, .m4a, .wav, .aiff, .aif, .flac, .ogg): A sound file.
• Text (.txt, .md, .markdown, .log): A text file.
• Code or data (.json, .yaml, .yml, .xml, .sh, .zsh, .py, .js, .mjs, .ts, .swift, .sql, .diff, .patch, .html, .css): Code or data, the kind developers and tools save.
• Font (.ttf, .otf, .woff, .woff2): A font.
• Calendar invite (.ics): A calendar invite.
• Contact card (.vcf): A contact card.
• App (.app): An app.
• Data file (.bin, .dat): A data file, usually made by another app for its own use.
• Torrent (.torrent): A torrent file, a pointer to a download rather than the download itself.
• Folder: A folder.
• File: A file Rolltop doesn’t have a description for yet.

Screenshots in other languages

macOS names screenshots in the Mac’s own language. Rolltop recognises “Screenshot” (English), “Screen Shot” (English, before macOS 13), “Schermata” (Italian), “Bildschirmfoto” (German), “Capture d’écran” (French), “Captura de pantalla” (Spanish), “Captura de Tela” (Portuguese, Brazil), “Captura de ecrã” (Portuguese), “Schermafbeelding” (Dutch), “Skärmavbild” (Swedish), “Skærmbillede” (Danish), “Skjermbilde” (Norwegian), “Zrzut ekranu” (Polish), “Снимок экрана” (Russian), “スクリーンショット” (Japanese), “截屏” (Chinese, Simplified), “스크린샷” (Korean). Pictures named like an iPhone’s (IMG_) count when the picture itself says it’s a screenshot.