Privacy

Effective 31 October 2026. This policy explains how NullDisk handles your information. The controller responsible for NullDisk’s website, app usage telemetry, licensing and support information is Telesoft AG.

Your files stay with you

Local disk scans and cleanup happen on your Mac. The licensing service never receives your disk contents, file names, or scan results. Free use requires no account. Connecting a remote host or cloud provider uses the account and server you explicitly choose; those connections are separate from license purchases.

Anonymous app usage telemetry

NullDisk sends basic usage events to our telemetry service hosted on Cloudflare. Each installation generates a random anonymous ID, stored on your Mac. This is not a hardware identifier or an account ID, and we do not link it to purchases or license records. Events cover app launches, daily activity, session length, scan starts and completions, features opened, cleanup operations, supporter upgrade clicks and stable error codes. Scan and cleanup item counts and byte totals, and session lengths, use coarse ranges. Scan duration is sent in milliseconds. Cleanup totals describe bytes removed from selected locations; moving items to Trash or making backups may not free that much disk space.

Launch metadata includes the app version and build, macOS major/minor version, CPU architecture, language code, region code if available, and license category (free, trial, personal or team, where detectable). Usage events include timestamps, a broad scan target category such as a folder or external volume, and fixed feature and upgrade-surface categories. Cloudflare supplies a country code from the request. This telemetry does not include file names, paths, file contents, volume names, usernames, email addresses, license keys, hardware IDs or free-text error messages.

Cloudflare necessarily receives the connection’s IP address to deliver and protect the service. Our telemetry database does not store IP addresses. Abuse limits use temporary keyed hashes of coarse network prefixes; these records expire after two hours and are cleared by daily maintenance. Raw events and daily install records are deleted from the live database after 13 calendar months by daily maintenance. The install registry, which distinguishes new from returning installations, is kept while an installation is active and deleted after 13 months of inactivity. Cloudflare recovery backups may retain deleted records for up to 30 additional days. Daily aggregates without install IDs are retained. The app keeps a bounded offline queue for up to 30 days and retries delivery silently.

Telemetry is currently required to use the app, including the free edition, and there is no in-app opt-out. An opt-out may be added in a future version. Scans and cleanup continue to work offline; telemetry delivery is best effort.

Purchases

Creem processes direct payments as merchant of record, including payment details, tax information and invoices under its privacy policy. We receive your purchase email, order and checkout identifiers, the product, seat quantity and payment/refund status so we can fulfill your purchase. We do not receive your full card details.

Licensing and email

Cloudflare hosts the website and license records. AhaSend delivers license purchase and recovery emails and receives the recipient address and message content, including your signed license and activation link. Open and click tracking are disabled for these emails. If you purchase a direct license, fulfillment and recovery require your purchase email, signed license, license status, order references and delivery records, plus transactional emails. A signed license includes your purchase email; keep the code private. These details are used to fulfill the purchase, provide recovery and prevent abuse. Purchase emails are not used for marketing without separate consent.

Website requests and temporary storage

Cloudflare receives ordinary request information, including IP addresses, to serve and protect the site. Rate-limit records use short-lived, keyed hashes of addresses or IPs rather than storing the raw IP in our license database. Expired rate-limit records are cleaned automatically.

The website loads fonts from Google Fonts. Your browser contacts Google to fetch those fonts, which exposes ordinary request information such as your IP address. See Google Fonts’ privacy information. If you email support, we process your address and message to answer your request.

The purchase confirmation page stores a random purchase-link token in your browser’s session storage. This lets you reload the confirmation page during that browser session. It is used only to retrieve your verified purchase and expires on the server after seven days. Activation codes are passed in URL fragments, which are not sent with HTTP requests.

Retention and your rights

We retain purchase and license records while needed to honor your permanent license, provide recovery, address disputes and meet legal obligations. Short-lived rate-limit data is deleted automatically. You may request access, correction or deletion by contacting support; legally required records may need to be retained, and deleting license records may prevent future recovery. You may also raise a complaint with your applicable data protection authority.