Privacy Policy

1. Introduction

This Privacy Policy explains how OverClean ("the Application", "we", "our") handles information when you use our macOS disk space analyzer application. We are committed to protecting your privacy and being transparent about our data practices.

Key Point: OverClean's core disk-scanning functionality is fully offline and never transmits your file data. The Application does make automatic network requests to activate and periodically verify your license key (see Section 3.5), and it sends data if you choose to submit the optional in-app Feedback or Review form (see Section 3.4).

2. Data Controller Information

OverClean is proprietary, closed-source software. For privacy inquiries, please contact us through the contact form on our website.

3. Data We Collect

3.1 File System Metadata

When you perform a scan, the Application collects the following metadata from your file system:

• File paths and names
• File sizes
• Creation dates
• Modification dates
• File owner information
• File extensions and types

3.2 Application Information

When scanning for applications and leftovers, the Application collects:

• Application bundle identifiers
• Application names and versions
• Application bundle locations and sizes

3.3 What We Do NOT Collect

• No file contents: We only read file metadata, never the actual content of your files
• No usage analytics: We do not track how you use the Application
• No telemetry: We do not send any usage data or crash reports automatically
• No transmission of your scanned file or directory data: The Application never sends your scan results anywhere. It does make a small automatic network request on each launch to verify your license (Section 3.5), and it makes a network request when you explicitly submit the Feedback or Review form (Section 3.4)
• No account information: The Application does not require registration or sign-in beyond entering a license key

3.4 Optional Feedback & Review Data

The Application includes an optional in-app Feedback form and an optional in-app Review form. Nothing in this section is collected unless you actively open one of these forms and press "Send"/"Submit" — reaching the 3rd or every 10th launch only displays a prompt, it does not send anything by itself.

Feedback form, if you choose to submit it, sends:

• Your star rating
• Any feature request or problem description you typed
• Your macOS version and Mac model (auto-filled, editable)
• Your email address, if you choose to provide one (optional, used only to follow up on your report)

Review form, if you choose to submit it, sends:

• Your star rating
• The testimonial text you typed
• The name you choose to display if we publish your review (e.g. "Oleksii R.")
• Your email address (used only to contact you about your review, not published)

Submitting the Review form requires you to check a consent box agreeing that the testimonial and display name may be published on our website, as-is, and translated into other languages. Your email address is never published.

Both forms are submitted directly to Google Forms (operated by Google LLC), our form provider — see Section 11 for details.

3.5 License Activation Data

If you activate a paid license, the Application collects and transmits to our license server:

• The license key you enter
• A hashed hardware identifier derived from your Mac's serial number and network MAC address (SHA-256, one-way — we cannot recover your original serial number or MAC address from it)
• The Application version

This data is sent when you activate a license, when you deactivate a device, and automatically each time the Application launches, to verify your license is still valid. If verification fails (e.g., no internet connection), the Application permits offline use for up to 14 days based on the last successful check, after which premium features are locked again until you reconnect.

License purchases themselves are handled by Paddle, our payment processor — see Section 11.

4. How We Use Data

All collected data is used exclusively for:

• Displaying file and directory information in the Application interface
• Calculating disk usage statistics
• Categorizing files by type
• Identifying applications and their associated data
• Detecting orphaned application data (leftovers)
• Verifying your license and unlocking premium features (Details, Applications, Leftovers)

All disk-scanning data processing occurs entirely on your local device. License data is the only category described in this policy that is transmitted off-device as a normal part of using the Application.

5. Data Storage

5.1 Local Database

Scan results are stored in a local SQLite database on your Mac at:

~/Library/Application Support/Overclean/overclean.db

5.2 License Key Storage

Your license key is stored locally in the macOS Keychain (not in the SQLite database described above), where it is protected by the operating system. A record of your activation (license key, hashed hardware identifier, activation timestamp) is also stored on our license server for as long as your license is active — see Section 3.5 and Section 7.

5.3 No Cloud Storage of Scan Data

• Your scanned file, directory, and application data is never uploaded to any cloud service or external server
• All scan data remains on your local device
• The only data stored outside your device is the license activation record described in Section 5.2

5.4 User Control

You have complete control over the stored data:

• You can delete the local database file at any time
• You can deactivate a device's license at any time from Options, which removes the activation record from our server and the key from your Keychain
• Uninstalling the Application removes all locally stored data
• No residual scan data is retained elsewhere

6. Data Sharing

Your scanned file data is never shared with third parties.

• No file, directory, or application scan data is ever transmitted over the internet
• No data is sold to advertisers or data brokers
• No data is shared with analytics providers
• Your license key and hashed hardware identifier are sent to our license server solely to validate your purchase and enforce the 3-device activation limit — see Section 3.5
• If you voluntarily submit the Feedback or Review form (Section 3.4), that content is sent to Google Forms, our form provider — see Section 11
• If you consent when submitting a Review, your testimonial and chosen display name may be published on our website
• If you purchase a license, your payment details are collected and processed directly by Paddle, our payment processor — see Section 11

7. Data Retention

• Local scan data is stored only for as long as needed to display scan results
• You can clear scan data at any time by deleting the database file
• Uninstalling the Application removes all locally stored data
• License activation records (key, hashed hardware identifier, activation timestamp) are retained on our license server for as long as your license remains active, to enforce the device limit and support deactivation requests
• We do not retain any backup copies of your scan data

8. Your Rights (GDPR Compliance)

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the following rights:

8.1 Right of Access (Article 15)

You can access all data stored by the Application by:

• Viewing scan results within the Application
• Opening the SQLite database file directly

8.2 Right to Rectification (Article 16)

Since the Application only reads file system metadata, any inaccuracies reflect your actual file system state. Changes to your files are reflected in subsequent scans.

8.3 Right to Erasure (Article 17)

You can delete all Application data by:

• Deleting the database file at ~/Library/Application Support/Overclean/
• Deactivating your license from Options, which removes the activation record from our license server
• Uninstalling the Application
• To request full deletion of your license record from our server, contact us through the contact form on our website

8.4 Right to Data Portability (Article 20)

The SQLite database is stored in a standard, open format that can be accessed with any SQLite-compatible tool.

8.5 Right to Object (Article 21)

Since no data processing occurs beyond local display and analysis, and no data is transmitted, this right is inherently satisfied.

8.6 How to Exercise Your Rights

To exercise any of these rights:

1. Delete the Application's data folder to remove all stored data
2. Uninstall the Application to remove all associated files
3. Contact us through the contact form on our website for any questions

9. Security Measures

We implement appropriate security measures:

• All scan data is stored locally with standard macOS file system permissions
• Your license key is stored in the macOS Keychain, not in plain text on disk
• Feedback/Review form submissions and license activation/verification requests are sent over HTTPS
• License requests are additionally authenticated with HMAC-SHA256 request signing to prevent tampering
• The Application requests only necessary system permissions (Full Disk Access for scanning)

10. Children's Privacy

The Application does not knowingly collect personal information from children under the age of 16. The Feedback and Review forms are optional and intended for adult users of the Application; we do not knowingly solicit or retain data submitted by children.

11. Third-Party Services

OverClean's disk-scanning functionality does not use any third-party services. The Application does rely on the following services for licensing and optional feedback:

• License server (licenses.overcleanmacapp.com), operated by us and proxied through Cloudflare for security and performance: receives your license key and hashed hardware identifier as described in Section 3.5. Cloudflare processes connection-level technical data (such as IP address) as our infrastructure provider; see Cloudflare's Privacy Policy.
• Paddle (Paddle.com Market Limited), our payment processor and merchant of record: processes your purchase, including your name, email, and payment details, when you buy a license key. We receive only your license key and order confirmation from Paddle — we do not receive or store your full payment details. Paddle's collection and use of this data is governed by Paddle's Privacy Policy.
• Google Forms, used solely to receive your optional Feedback or Review form submission, subject to Google's Privacy Policy.

Beyond these:

• No analytics services (Google Analytics, etc.)
• No crash reporting services
• No advertising networks
• No network connections of any kind other than license activation/verification (Section 3.5), optional Feedback/Review submission (Section 3.4), and license purchase via Paddle

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be indicated by updating the "Effective Date" at the top of this document. We encourage you to review this Privacy Policy periodically.

13. Legal Basis for Processing (GDPR Article 6)

The legal basis for processing file system metadata is:

• Legitimate interest: To provide the core functionality of disk space analysis that you requested when using the Application
• Consent: By choosing to scan specific directories, you consent to the local processing of that data

The legal basis for processing Feedback/Review form data is:

• Consent: By choosing to fill in and submit the Feedback or Review form, you consent to that data being sent to Google Forms and, for Reviews, to the additional publication described in Section 3.4

The legal basis for processing license activation data (Section 3.5) is:

• Performance of a contract: Processing your license key and hashed hardware identifier is necessary to deliver the paid features you purchased and to enforce the license terms (Article 6(1)(b))

14. Contact Information

For questions or concerns about this Privacy Policy or our data practices, please contact us through the contact form on our website.