Privacy Policy

1. Who we are

StorageSweeper is operated by Adi Vizgan (“we,” “us,” the “Provider”), based in Israel. You can reach us at adi.vizgan.business@gmail.com.

2. What StorageSweeper scans on your Mac

The app reads metadata (file sizes, modification dates, locations) about files in folders you give it access to: ~/Library, /Library, /Applications, the iOS Simulator runtime store, Xcode caches, and any folder you explicitly open from the Storage Explorer. The Duplicate Files tool also computes content hashes (SHA-256) of candidate files to detect duplicates.

All of this happens entirely on your Mac. No file contents, no file names, no paths, and no hash values are ever sent off your machine by StorageSweeper.

3. What we receive over the network

There are only two situations in which the app makes a network request:

3.1 License activation

When you enter a license key and click Activate, the app sends to our (or Paddle's) activation endpoint:

• your license key;
• the app version (e.g., 1.0.0);
• an anonymized one-way SHA-256 hash of your Mac's hardware UUID combined with a private salt. This hash cannot be reversed back to your hardware UUID or to anything else that identifies you;
• your IP address, in transit (as with any web request). We do not log it.

The response is a cryptographically-signed activation token cached in your macOS Keychain. The app then operates fully offline from then on.

3.2 Update checks

StorageSweeper periodically fetches an appcast.xml file from our website to check whether a newer version is available. This request sends only the app version, the macOS version, and your IP address (in transit). We do not log it.

4. What we do not collect

• No analytics or telemetry of any kind.
• No crash reporting.
• No file names, file paths, file contents, hashes, or scan results.
• No cookies inside the app.
• No third-party tracking SDKs.
• No account creation. There is no “StorageSweeper account” system.

5. Data processed by Paddle (our payment processor)

When you purchase a license, your name, email address, billing country, and payment details are processed by Paddle (the Merchant of Record for the sale). Paddle is the data controller for that transactional data. We receive only the information necessary to fulfil the license: your email address (to send you the license key) and the country of purchase (for invoicing).

Paddle's privacy practices are governed by Paddle's Privacy Policy, which you should review before purchase. Paddle complies with GDPR, CCPA, and similar privacy regimes.

6. Data on this website

This website (storagesweeper.com) is a static site hosted on a Hostinger VPS we operate ourselves. The site does not set tracking cookies, does not embed analytics, and does not load third-party scripts other than Paddle's checkout overlay (loaded only on pages that include a Buy button). The web server records standard access logs (IP address, user-agent, requested URL) for security and abuse prevention, retained for up to 30 days and then discarded.

7. Your rights

Because we hold almost no personal data about you, most data-subject requests are short conversations. You can:

• Access any data we hold about you (in practice: your email address from your purchase record).
• Correct it.
• Request deletion, subject to legal retention requirements for tax records (Israeli tax law generally requires invoice retention for 7 years).
• Object to processing or restrict processing.
• Lodge a complaint with your local data-protection authority (in the EU, your national DPA; in Israel, the Privacy Protection Authority).

To exercise any of these, email adi.vizgan.business@gmail.com. We respond within 30 days.

8. Data retention

• License records (license key, email, purchase date, machine-ID hash): retained for the lifetime of the license so you can re-activate or get support. Deleted on request, subject to tax-law retention obligations.
• Support email correspondence: retained for up to 2 years, then deleted.
• Activation tokens: stored locally in your macOS Keychain on your Mac. We do not have access to them.

9. International transfers

If you purchase from outside Israel, your transactional data is transferred to Israel for license processing. Israel is recognised by the European Commission as providing an adequate level of data protection (Commission Decision 2011/61/EU). Paddle handles international transfers under its own Standard Contractual Clauses where applicable.

10. Children

StorageSweeper is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we'll delete it.

11. Changes to this Policy

If we make material changes to this Privacy Policy, we'll update the effective date at the top and, if you have an active license registered to an email address, send you a notice by email. Continued use of the Software after a change constitutes acceptance.

12. Contact

Questions about this Privacy Policy? Email adi.vizgan.business@gmail.com.