Your Drive stays yours.

We do not send Drive scans, file contents, file names, folder names, local paths, License Keys, checkout identifiers, form values, request bodies, cookies, or stored app state to PostHog or Sentry. The desktop replay masks all visible text and element attributes. Website inputs and marked sensitive areas are masked or blocked.

PostHog records page views, navigation, clicks and other interface interactions, acquisition information, heatmaps, web performance, and session replay. It uses a random browser or app identifier and session identifiers. We do not identify you by name or email, call PostHog's identify function, or create person profiles.

The purpose is to understand how people find and use PoppyDisk, find confusing or broken interactions, and improve performance. The legal basis is your consent under GDPR Article 6(1)(a) and the applicable terminal-access rules.

If you buy after agreeing to Product Analytics, the server asks Polar to confirm one succeeded checkout and one paid, unrefunded order before recording the purchase_completed milestone. PostHog receives no checkout, order, customer, payment, or License Key identifier.

Sentry records errors, stack traces, release and runtime details, browser or operating system context, up to 100 recent interface, navigation, console, and network breadcrumbs, plus 10 percent of performance traces. Error events are sampled at 100 percent. Default personal-data collection is disabled. Request and response headers, request bodies, cookies, GraphQL documents and variables, and query values are disabled or removed. Local paths and secrets are filtered before sending.

The purpose is to reproduce failures, prioritize repairs, and improve reliability. The legal basis is your consent under GDPR Article 6(1)(a) and the applicable terminal-access rules.

Product Analytics is processed by PostHog in its EU Cloud in Frankfurt. Diagnostics is processed by Sentry using its Germany data-storage region. These providers act as processors under their data processing terms. Their approved subprocessors may process limited data outside the European Economic Area under adequacy decisions, the EU-US Data Privacy Framework where applicable, or European Commission Standard Contractual Clauses.

Product Analytics events currently use PostHog's 84-month project retention baseline. This temporary window is under review and is not provider-enforced. Session replay is retained for 30 days. Sentry event data is available for 30 days on the selected plan. Provider backups are removed on their backup rotation, which may take up to 90 days. Aggregated statistics that no longer identify a browser, installation, or session may be kept longer.

Withdrawing either purpose stops its future collection and clears its pending local state. Withdrawing Product Analytics also resets its random browser or app identifier. Withdrawal does not automatically locate already collected events. For a data request, you may provide an identifier or event ID, approximate timestamp, release, surface, and operation. We will explain what can and cannot be located from that information.

Use the Privacy choices link in the footer of this page to grant or withdraw either purpose at any time. You can also ask for access, correction, deletion, restriction, portability, or withdrawal of consent by emailing privacy@poppydisk.com. You may complain to the CNIL or your local data-protection authority. No automated decision with legal or similarly significant effects is made from telemetry.

When you buy the Clean Tier, Polar gives us your email address, your name, your country, and the identifiers of the order and of your License Key. We use them to send you three emails from hello@poppydisk.com: your License Key with the steps to unlock, then two short guides over the following week. We may also email you about major PoppyDisk releases. These addresses are never sold or shared, and PostHog and Sentry never receive them.

Delivering your License Key is part of the purchase (GDPR Article 6(1)(b)). The two follow-up emails and release announcements rest on our legitimate interest in supporting people who bought PoppyDisk (Article 6(1)(f)), under the existing-customer rule of the French Postal and Electronic Communications Code. Every email links to your Email Preferences, where you can turn either kind off at any time, and your mail client's unsubscribe button turns both off.

Emails are sent by Resend from its Ireland region. Resend acts as a processor under its data processing terms and stores account records, including recipient addresses and delivery logs, in the United States under the EU-US Data Privacy Framework or Standard Contractual Clauses.

We keep your buyer record while your License Key is valid and remove it when a purchase is refunded or a key is revoked. Delivery records are kept for 12 months, and the notifications Polar and Resend send us for 30 days. To have everything deleted sooner, including your Resend contact, write to privacy@poppydisk.com or support@poppydisk.com from the address you bought with. Afterwards we keep only a salted hash of the address, so a late notification cannot recreate the record. Addresses that bounce or report us as spam are never emailed again.

In the Direct-download Edition, when PoppyDisk starts or you choose Check for updates, it asks downloads.poppydisk.com for the current version. That request carries your IP address and the updater's version string, nothing about you, your Drives, or this PC, and it is kept only in the server's security logs. Demo Mode never checks.

The Store Edition does not make these update checks. Microsoft Store manages its updates through Microsoft's services.

Download delivery and security logs may be processed to provide and protect the site. When you buy or enter a License Key, Polar processes the checkout, payment, receipt, activation, and occasional revalidation required to provide the Clean Tier. These operations are separate from Product Analytics and Diagnostics.