Great news: in order to work, DaisyDisk doesn’t need to collect your personal data, and we try really hard to avoid that as much as we can. It’s just a disk tool, after all!

To analyze your disk space usage, DaisyDisk scans metadata of your file system — namely, file names and sizes (without content) — and all data stays on your local computer. Nothing is sent out to the network.

We do use some bits of information about you for things like license management, and we want to be clear about what data we need and why.

In free trial mode:

• Your email address. We create a record for you in our database when you activate the free trial or buy a license, and store your license under that email. You can retrieve your license on our website using that email. Besides, we may occasionally use it to communicate with you regarding your use of the app, such as trial expiration, important product changes, availability of new features or versions of the app. (You can unsubscribe any time.)
• Your computer’s hardware ID. It’s just an anonymous unique number of your computer, which our server uses to limit the number of Macs where you can install the license, according to our EULA.

In registered mode:

• Your full name. Your name is engraved into your license key, and is used for verification when you register your license.
• Your country code. When you buy a license, we get your country’s 2-letter code from our payment processor and keep it in our database, to be able to account on local regulations such as GDPR.
• Besides, we’ll most likely have your external IP address, because it’s part of every client-to-server request in the Internet.

None of the above data is exposed online or passed to third parties, we use it solely for our internal license management purposes.

DaisyDisk is capable to connect and evaluate the space usage on cloud storage services, such as Google Drive, Dropbox, Microsoft OneDrive and Box.

The access to the cloud accounts must first be authorized. The user interacts with corresponding cloud service’s webpage using the OAuth technology, in order to authorize DaisyDisk to access their cloud data, and choose the granted access permissions.

Just like with local disks, DaisyDisk only accesses the metadata of files in the cloud storage – their names, sizes and optionally creation/modification dates, in order to build its map of cloud space usage. The content of files is not accessed, unless the user requests a preview of a particular file.

Security procedures are in place to protect the confidentiality of user’s data that DaisyDisk was allowed to access. The requests DaisyDisk sends and the data DaisyDisk receives from the cloud server are protected by the secure HTTPS/SSL connection. The received data only remains in transient memory while the app is running and is not locally stored on disk, and is also never transmitted outside of the app to other apps or servers.

Just like any other online business we have to buy ads on other websites, particularly on Facebook, Twitter and Google Seach. To make our ad budget more efficient, we want to target our ads only to people who already visited our website. This technique is called “remarketing” and works using another cookie. Similar to Google Analytics, whenever you visit our website, a randomly generated, anonymous user ID is saved in your browser and also passed to Facebook, Twitter and Google. When you afterwards visit Facebook, Twitter or Google Search, they will look up the cookie in your browser and therefore find out whether you might be interested in our ads on their platform.

Google, Facebook and Twitter in this case act as third-party “data processor”, which means they get anonymous user data from us, but they guarantee (using a special agreement) not to reduce the privacy promise we’re making to our own customers. The data is not exposed online and is used only for our business functions.

If you are in the EU, we will ask your consent before saving any tracking cookies in your web browser (as required by the GDPR).