Your disk stays local.

Who is responsible

DiskTree is operated by Muhammad Mohsin Rafi, an individual seller based in Pakistan.

For privacy questions or requests, email support@disktree.app. This policy covers DiskTree’s website, app and related support and licensing services. Payment providers also publish their own notices.

Current availability: the public site provides product information and email support. Purchases, public app downloads and customer activation/recovery are not open. The sections marked “when enabled” explain how those services will handle information when they become available.

Disk analysis on your Mac

DiskTree reads filesystem metadata to build its local storage view. The scan tree, file names, paths, sizes and file contents are not sent to DiskTree’s payment or licensing service. There is no app analytics or advertising telemetry.

Choosing a folder, marking items and reviewing a selection do not upload that selection. If you use network drives or cloud-managed storage, the filesystem or cloud provider can have its own network behaviour. Information you choose to include in a support message is separate from the local scan.

For activation, the app stores a randomly generated installation identifier and a signed activation record on your Mac. It does not use a hardware fingerprint. Ordinary use after activation does not make recurring licence checks.

Website visits and support today

Cloudflare delivers and protects the website. Serving a request involves network information such as your IP address, requested URL, time and browser/request headers. Cloudflare may process this information for delivery, reliability and security under its privacy policy. We do not promise a particular retention period for its own operational data.

The site has no advertising pixels, third-party fonts or website analytics script. Our application error logging uses generic error categories rather than raw requests, purchase keys, message bodies or payment responses. The configured hosting logs are sampled, with automatic invocation logs disabled; this does not prevent the hosting provider from processing network data.

If you email support, we receive your email address, message, any attachments you choose to send and correspondence needed to handle the request. The mailbox is provided by Namecheap Private Email. Please omit private files, full purchase keys, recovery links and payment-card details unless we have identified a specific safe way to provide something needed.

Support email is used to answer your request, investigate problems and keep relevant correspondence. It is not a newsletter signup. We do not run marketing-email collection on this site.

Payments, when enabled

Paddle will provide checkout as merchant of record. It collects the payment, billing and contact information needed for the transaction and handles payment methods, receipts, taxes and its fraud checks. DiskTree does not provide card-entry fields or receive full card numbers or security codes. See Paddle’s Privacy Notice.

Our service receives verified purchase information from Paddle, including the purchase email, transaction identifiers, product and price, payment status and refund or dispute status. It uses that information to issue the correct licence, deliver the key, prevent duplicate fulfillment and handle purchase questions. It stores purchase and event references, licence status, email and a protected recoverable copy of the key in Cloudflare’s database service.

Activation and recovery, when enabled

Activation and deactivation send your purchase key and random installation identifier to the licensing service. The service checks the purchase and two-Mac allowance and records the licence/installation association and activation or deactivation times. It returns a signed record for offline use. Filenames, scan results and hardware serial numbers are not part of these requests.

Purchase recovery uses your email address and a private, single-use email link. Successful recovery reveals your purchase key and active installation identifiers so you can release a Mac slot. There is no separate DiskTree account or password.

For abuse prevention, the licensing database keeps salted hashes derived from requesting IP addresses and, for recovery limits, email addresses, alongside request counters. It does not store raw IP addresses in those rate-limit records. The hosting provider still receives the underlying connection information.

Transactional licence and recovery emails are sent through Resend. Resend receives the recipient address, sender, Reply-To, subject and message contents, which can include your purchase key or private recovery link. Our database stores encrypted queued message contents and delivery status, attempt times and provider receipt identifiers to handle retries. Replies go to support@disktree.app.

Browser storage and payment content

The marketing pages do not set advertising or analytics cookies. When checkout or recovery is enabled, the website uses browser session storage for private purchase-claim or recovery tokens so the same tab can continue the process. The site does not save your purchase key in that storage. Treat private links and an open recovery tab as sensitive.

Paddle’s checkout script loads only when an enabled checkout is opened. Paddle and its payment partners may use their own storage and request information for checkout and security. Their notices apply to those services. You can clear browser storage, but doing so may end your private purchase or recovery session.

How long information is kept

Purchase and activation records support continuing licence access, recovery, refunds and support. The current licensing service has no automatic deletion schedule for those records or its email-delivery history. No fixed automatic deletion period has been set for support correspondence. This is not a promise that records disappear after a particular number of days.

Private purchase claims are valid for 24 hours. Recovery links and the resulting management sessions are valid for 15 minutes; recovery links can be used once. Expiration ends access through the token, but does not automatically delete the underlying purchase, token or email record.

For access, correction or deletion requests, contact support@disktree.app. We may need to confirm that the request concerns your own purchase or correspondence. We will explain any effect on licence recovery and any records that need to be retained for applicable obligations or unresolved transactions. Providers have their own retention practices, described in their notices.

Service providers and your choices

• Cloudflare: website delivery, security and the licensing database when enabled.
• Paddle: checkout, payments and transaction administration when enabled.
• Resend: transactional email delivery.
• Namecheap Private Email: support correspondence.

These providers operate internationally. Information handled by online services may be processed outside your country; local disk scanning is separate from that processing. We do not sell scan data or personal information, or share it for targeted advertising.

You can use the free local scan and review without making a purchase or signing up for a mailing list. If applicable law gives you additional data rights or a right to complain to a data-protection authority, this policy does not limit them. Contact us to discuss a request or concern.

We will update the date on this policy when it changes and describe material changes before introducing new collection or tracking.