The catalog pg_default_acl stores initial privileges to be assigned to newly created objects.