Your Drive stays yours.

We do not send Drive scans, file contents, file names, folder names, local paths, License Keys, checkout identifiers, form values, request bodies, cookies, or stored app state to PostHog or Sentry. The desktop replay masks all visible text and element attributes. Website inputs and marked sensitive areas are masked or blocked.

PostHog records page views, navigation, clicks and other interface interactions, acquisition information, heatmaps, web performance, and session replay. It uses a random browser or app identifier and session identifiers. We do not identify you by name or email, call PostHog's identify function, or create person profiles.

The purpose is to understand how people find and use PoppyDisk, find confusing or broken interactions, and improve performance. The legal basis is your consent under GDPR Article 6(1)(a) and the applicable terminal-access rules.

Sentry records errors, stack traces, release and runtime details, browser or operating system context, up to 100 recent interface, navigation, console, and network breadcrumbs, plus 10 percent of performance traces. Error events are sampled at 100 percent. Default personal-data collection is disabled. Request and response headers, request bodies, cookies, GraphQL documents and variables, and query values are disabled or removed. Local paths and secrets are filtered before sending.

The purpose is to reproduce failures, prioritize repairs, and improve reliability. The legal basis is your consent under GDPR Article 6(1)(a) and the applicable terminal-access rules.

Product Analytics is processed by PostHog in its EU Cloud in Frankfurt. Diagnostics is processed by Sentry using its Germany data-storage region. These providers act as processors under their data processing terms. Their approved subprocessors may process limited data outside the European Economic Area under adequacy decisions, the EU-US Data Privacy Framework where applicable, or European Commission Standard Contractual Clauses.

Product Analytics events currently use PostHog's 84-month project retention baseline. This temporary window is under review and is not provider-enforced. Session replay is retained for 30 days. Sentry event data is available for 30 days on the selected plan. Provider backups are removed on their backup rotation, which may take up to 90 days. Aggregated statistics that no longer identify a browser, installation, or session may be kept longer.

Withdrawing Product Analytics clears its browser or app identifier and stops future collection. It does not automatically locate already collected events. You may ask us to delete data linked to an identifier if you can provide that identifier.

Use the Privacy choices control on any page to grant or withdraw either purpose at any time. You can also ask for access, correction, deletion, restriction, portability, or withdrawal of consent by emailing privacy@poppydisk.com. You may complain to the CNIL or your local data-protection authority. No automated decision with legal or similarly significant effects is made from telemetry.

Download delivery and security logs may be processed to provide and protect the site. When you buy or enter a License Key, Polar processes the checkout, payment, receipt, activation, and occasional revalidation required to provide the Clean Tier. These operations are separate from Product Analytics and Diagnostics.