Privacy Policy

1. Who we are

StorageSweeper is operated by Adi Vizgan (“we,” “us,” the “Provider”), based in Israel. You can reach us at adi.vizgan.business@gmail.com.

2. What StorageSweeper scans on your Mac

The app reads metadata (file sizes, modification dates, locations) about files in folders you give it access to: ~/Library, /Library, /Applications, the iOS Simulator runtime store, Xcode caches, and any folder you explicitly open from the Storage Explorer. The Duplicate Files tool also computes content hashes (SHA-256) of candidate files to detect duplicates.

All of this happens entirely on your Mac. No file contents, no file names, no paths, and no hash values are ever sent off your machine by StorageSweeper.

3. What we receive over the network

There are only three situations in which the app makes a network request:

3.1 License activation

When you enter a license key and click Activate, the app sends to our (or Lemon Squeezy's) activation endpoint:

• your license key;
• the app version (e.g., 1.0.0);
• an anonymized one-way SHA-256 hash of your Mac's hardware UUID combined with a private salt. This hash cannot be reversed back to your hardware UUID or to anything else that identifies you;
• your IP address, in transit (as with any web request). We do not log it.

The response is a cryptographically-signed activation token cached in your macOS Keychain. The app then works offline between license checks.

3.2 License re-validation

Occasionally, on launch, the app re-validates the cached license so that a refunded, revoked, or over-limit license stops working. This check sends the same minimal data as activation (your license key and the anonymized hardware hash, with your IP address in transit) and happens no more than once every 30 days; the app keeps working offline within that window.

3.3 Update checks

StorageSweeper periodically fetches an appcast.xml file from our website to check whether a newer version is available. This request sends only the app version, the macOS version, and your IP address (in transit). We do not log it.

4. What we do not collect

• No analytics or telemetry of any kind.
• No crash reporting.
• No file names, file paths, file contents, hashes, or scan results.
• No cookies inside the app.
• No third-party tracking SDKs.
• No account creation. There is no “StorageSweeper account” system.

5. Data processed by Lemon Squeezy (our payment processor)

When you purchase a license, your name, email address, billing country, and payment details are processed by Lemon Squeezy (the Merchant of Record for the sale). Lemon Squeezy is the data controller for that transactional data. We receive only the information necessary to fulfil the license: your email address (to send you the license key) and the country of purchase (for invoicing).

Lemon Squeezy's privacy practices are governed by Lemon Squeezy's Privacy Policy, which you should review before purchase. Lemon Squeezy complies with GDPR, CCPA, and similar privacy regimes.

6. Data on this website

This website (storagesweeper.com) is a static site hosted on a Hostinger VPS we operate ourselves. The site does not set tracking cookies, does not embed analytics, and does not load third-party scripts unless you click a Buy button, at which point Lemon Squeezy's checkout script is loaded to process checkout. The web server records standard access logs (IP address, user-agent, requested URL) for security and abuse prevention, retained for up to 30 days and then discarded.

7. Cookies and website storage

We do not use analytics cookies, advertising cookies, tracking pixels, or behavioral profiling on this website.

The site stores one local preference in your browser: ss-theme, which remembers whether you chose light or dark mode. This is stored with localStorage, not a cookie, and is used only to keep the site visually consistent for you.

If you click a Buy button, Lemon Squeezy may use cookies or similar storage that are necessary to operate checkout, prevent fraud, process payment, calculate taxes, and deliver your receipt and license key. Lemon Squeezy's use of that data is governed by Lemon Squeezy's Privacy Policy.

8. Your rights

Because we hold almost no personal data about you, most data-subject requests are short conversations. You can:

• Access any data we hold about you (in practice: your email address from your purchase record).
• Correct it.
• Request deletion, subject to legal retention requirements for tax records (Israeli tax law generally requires invoice retention for 7 years).
• Object to processing or restrict processing.
• Lodge a complaint with your local data-protection authority (in the EU, your national DPA; in Israel, the Privacy Protection Authority).

To exercise any of these, email adi.vizgan.business@gmail.com. We respond within 30 days.

9. Data retention

• License records (license key, email, purchase date, machine-ID hash): retained for the lifetime of the license so you can re-activate or get support. Deleted on request, subject to tax-law retention obligations.
• Support email correspondence: retained for up to 2 years, then deleted.
• Activation tokens: stored locally in your macOS Keychain on your Mac. We do not have access to them.

10. International transfers

If you purchase from outside Israel, your transactional data is transferred to Israel for license processing. Israel is recognised by the European Commission as providing an adequate level of data protection (Commission Decision 2011/61/EU). Lemon Squeezy handles international transfers under its own Standard Contractual Clauses where applicable.

11. Children

StorageSweeper is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we'll delete it.

12. Changes to this Policy

If we make material changes to this Privacy Policy, we'll update the effective date at the top and, if you have an active license registered to an email address, send you a notice by email. Continued use of the Software after a change constitutes acceptance.

13. Contact

Questions about this Privacy Policy? Email adi.vizgan.business@gmail.com.