PRIVACY
Privacy policy
Last updated: 19 July 2026 · Version 1.0
Written to be understood. It says which data we touch, which we don't, and why you can verify it yourself in the code.
THE WHOLE THING IN 4 LINES
The app scans and cleans on your device. Neither your files nor the results ever leave it.
Zero telemetry. We don't measure what you use, how much, or when.
There are only two connections: checking for a new version and, if you ask for it, signing up for news.
We never sell or hand over data to anyone.
1. Who is responsible
The data controller is ZodHub, developer and distributor of the ZodHub CleanPC application. You can get in touch at info@zodhub.com or by opening an issue in the project repository. This policy covers both the desktop application and this website.
2. The underlying principle
Many commercial cleaners need to know things about you in order to work: what you have installed, what you delete, how often you open the app. We start from the opposite idea: a tool that rummages through your files is the last place telemetry belongs.
That's why the design is local-first. The app has no server of its own, no user accounts, and sends no usage reports. Everything it analyses stays where it is generated: on your computer.
3. What the app does on your device
To do its job, the app accesses locally:
Paths, names and sizes of files and folders in the areas it scans, to work out what is taking up space.
File contents, only in the duplicate finder and only to compute a cryptographic fingerprint for comparison. Neither the content nor the fingerprint is kept beyond the session.
System information: CPU, memory and disk usage, temperature sensors, running processes and network counters.
The list of installed programs and the files they leave behind, in the applications module.
Your preferences (theme, language, scheduled tasks), stored in your user's configuration folder.
4. What the app does NOT do
It carries no telemetry, analytics or usage reporting of any kind.
It carries no advertising identifiers, cookies or device fingerprinting.
It bundles no third-party SDKs that collect data on their own account.
It uploads no files, listings or scan results to any server.
It builds no profile of you, assigns you no unique identifier and cross-references nothing between devices.
5. Internet connections: the only two
We want to be precise here, because this is where others are vague. The app opens a connection in two cases only:
a) Update checks
Periodically, and at startup, the app downloads a public file hosted on GitHub to find out whether a newer version exists. As with any web request, GitHub's server receives your IP address, the app version and basic technical connection data (agent, date and time). We send no identifier of our own, we don't know who makes each request, and we don't receive that log. If you'd rather avoid it, you can turn automatic checking off in the settings and update manually from this website.
b) Voluntary news subscription
Only if you fill in the form in "Your space" and press the button. Exactly what you typed is sent: name and email. Nothing else travels with it.
In addition, when you click a link inside the app (this website, donations, repository), it opens in your browser, outside the application. The app embeds no remote content and loads no third-party resources into its interface: fonts and styles ship inside the program.
6. Data we process, why, and on what legal basis
We process no special categories of data (health, beliefs, biometrics…) and never ask you for identity documents.
7. News subscription
In "Your space" you can give us your name (optional) and your email address to receive notice of new features and important improvements.
Consent is express: you must tick a box that is not pre-ticked. Without it, the button stays disabled.
Project news only. We send no third-party advertising and pass your address to no one.
One-click unsubscribe: every email carries its opt-out link, and you can also request it by writing to us.
It is entirely optional. The app updates itself without this, and not subscribing limits no feature. We say so plainly on the screen itself.
8. This website
The site uses no analytics or advertising cookies, does not track you across sites, and shows no consent banners because there is nothing to consent to.
It does load the typeface and some styling and icon libraries from external delivery networks. By the technical nature of any web request, those providers receive your IP address and basic browser data. We say so even though it makes the story less tidy: that's the difference between an honest policy and a boilerplate one.
Hosting is GitHub Pages, which may keep access logs for security and diagnostics under its own policies.
9. Donations
Donations are processed entirely on the payment platform, outside this website and outside the app. We never see or store your card details at any point. From the provider we receive only payment confirmation and, if you supplied it there, your name or alias. Donating activates no features and changes nothing in the application.
10. Recipients and processors
To operate we rely on providers that may process data on our behalf, each limited to its function:
GitHub — hosting for the website, the code, and the downloads and updates.
The service receiving the subscription form and the tool we use to send the newsletter.
The payment platform, when you choose to donate.
We do not sell, rent or share your data for commercial purposes, now or in future. We would only disclose it to an authority where a legal rule or court order required us to.
11. International transfers
Some of those providers are established outside the European Economic Area. Where an international transfer occurs, it relies on the mechanisms provided by the GDPR (adequacy decision or the European Commission's standard contractual clauses). You can ask us for information about the applicable safeguards by writing to our contact address.
12. Retention periods
Subscription data: until you unsubscribe or request erasure. After unsubscribing we keep the bare minimum needed to evidence that the request was honoured.
Enquiries: for as long as needed to resolve them and thereafter for any applicable limitation periods.
Donation data: whatever accounting and tax rules require of the payment provider.
Data from scanning your machine: not applicable, because it never leaves your device.
13. Security
We apply reasonable technical and organisational measures: encrypted communications (HTTPS), restricted access to the subscriber list, and the minimisation principle — easy to honour here, since we collect almost nothing. In addition, app releases are distributed cryptographically signed, so the updater rejects any package that does not come from us. No system is infallible, but the less data there is, the less there is to protect.
14. Your rights
You may exercise at any time the rights of access, rectification, erasure, restriction, objection and portability, and withdraw your consent without affecting the lawfulness of prior processing. Just write to info@zodhub.com saying what you want.
We will reply within the legal period of one month. In practice, the only thing we can hold about you is what you voluntarily typed into the form, so erasure is immediate.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es) or with your country's supervisory authority.
15. Minors
The news subscription is aimed at people aged 14 and over, the age from which Spanish law allows them to consent on their own behalf. If we detect a sign-up below that age without authorisation from a parent or guardian, we will delete it. The application itself can be used by anyone, since it collects no personal data.
16. Automated decisions and profiling
We take no automated decisions producing legal effects concerning you, and we build no profiles. The app classifies files by technical criteria (size, location, type), which does not amount to profiling within the meaning of the GDPR.
17. How to check that this is true
You don't have to take our word for it. The source code is public: anyone can review what network requests the program makes. You can also watch the app's traffic with a firewall or network monitor and verify that, apart from the version check, it talks to nobody. That is the only proof that really counts.
18. Changes to this policy
If we add any feature that involves a new outbound data flow, we will update this page at the same time and note it in the release notes. The date and version in the header identify the text in force. See also the terms of use, which complete this document.