Privacy

The DiskCity app

• The scan reads names, sizes and dates only. It never opens or reads the contents of your files, and the results stay in a database on your Mac.
• No account and no telemetry by default. The app doesn't send usage data. Crash reports are off until you turn them on in Settings.
• Anonymous stats, only if you turn them on. Off by default. If you opt in, the app sends once a week how much space each district uses (rounded to 0.1 GB), how much is rebuildable junk, the rulebook version and your Mac's family (for example “MacBookPro”). Never file or folder names, paths or an ID. Settings shows the exact text before anything is sent. We store it without your IP address, dated to the day.
• The Mayor is online by default, and says so. When you ask it something, the app sends your message plus folder names, sizes, dates and kinds of files (never file contents) to our server. Our server passes it through OpenRouter to two models: TypeSafe's Jev (in the US), which works out what you asked, and a writing model that phrases the reply from the numbers the app worked out (DeepSeek V4.1 Flash, with Anthropic's Claude Haiku as a fallback). We ask OpenRouter to use only hosts with a zero-data-retention policy, for both. Our server keeps message counts and costs, never your messages or the replies. “Hide names” in Settings sends sizes, dates and kinds only; “Offline Mayor” sends nothing and answers with suggestions worked out on your Mac.
• Claude, only if you choose it. Pro lets you connect your own Anthropic account. If you do, the same folder summaries go to Anthropic under your account and its terms. We never see them.
• Postcards show district totals only, never file or folder names, and you preview each one before sharing.
• Updates. The app checks this website for new versions. That request reveals your IP address and app version to our host, like any web request.
• Licence keys are checked offline. Entering a key doesn't contact us.
• Harbour destinations are yours. Files you send to your NAS or external drive go straight there; they never pass through our servers.

This website

The waitlist

If you join, we store your email address, when you signed up, which page you signed up from, and whether you confirmed. We send one confirmation email, and one email when the beta opens. We don't send marketing newsletters. To be removed, write to support@diskcity.app and we delete your entry.

Purchases

Dodo Payments is our merchant of record: it takes your payment, handles tax and sends your receipt, under its own privacy policy. We never see your card details. When a payment succeeds, Dodo tells us your email address, the product and a payment ID. We use the email once, to send your licence key, and store only a one-way hash of it alongside the licence ID, payment ID, tier and dates, so we can help if you lose your key.

Cookies and analytics

This site sets no cookies and runs no analytics or advertising scripts.

Who processes data for us

• Vercel hosts this website and keeps short-lived server logs, which include IP addresses.
• Our database provider stores the waitlist, licence, crash report and stats records described above.
• Resend delivers our transactional email (waitlist confirmation and licence keys).
• Dodo Payments processes payments as merchant of record.

Your rights

You can ask what we hold about you, ask us to correct it, or ask us to delete it, by writing to support@diskcity.app. We reply within 30 days. Deleting a licence record means we can't resend that key later, but the key keeps working.

Changes

If this policy changes, we'll update the date at the top of this page. If a change affects how we use data we already hold, we'll email the people affected first.