Privacy Policy

Moiz, of London, United Kingdom (“we”, “us”), makes and licenses Disk Census. For the information described here, from activation and check-ins, update checks, this website and support, we are the controller: we decide how and why it is used.

Purchases are made through Link, Stripe’s merchant of record (Sold through Link, LLC, through Stripe Managed Payments). Link handles your payment data under its own privacy policy, as a controller in its own right, not on our behalf. See Payments and Link.

You can reach us at support@diskcensus.com.

Your files

Your files and scan results stay on your Mac. Scans, history, review lists, the record of what was deleted, and the reports you export are made and kept there, in Disk Census’s own folders such as ~/Library/Application Support/census and ~/Library/Caches/census. Disk Census never sends file names, paths, sizes or contents, and we never receive them.

If you let an AI agent run census, the agent reads its output, including file names and paths, and may send it to the agent’s own provider. That is between you and that provider; Disk Census itself sends nothing.

If you choose to send us a report or a screenshot, for example with a support request, we receive what you send.

Activation and check-ins

Each Mac activates once, then checks in with our license service at least once every 60 days. These requests carry only:

• your license key, at activation only;
• the activation id our server gave that Mac;
• a SHA-256 hash of the Mac’s hardware id (IOPlatformUUID). The id itself never leaves the Mac;
• the Mac’s model identifier, such as Mac15,3, and the Disk Census version; and
• a random number that ties our answer to the request.

They never include your computer’s name, your user name, or any file data. Check-ins are part of the license, so they are always on. Like any internet request, they reveal your IP address. We keep only a salted hash of it, once a day per Mac, to spot one activation being used from many networks.

Why we use it: To activate your license on a Mac, keep to the limit of Macs per key, and end a license that was refunded.

Lawful basis: Performing our contract with you; our legitimate interest in preventing license misuse.

Your order

When you buy, Link passes us your order: what you bought, the price, the date, the Stripe references for the payment, and your email address. We use the email to send your key.

Our license records keep a hash of your key (never the key itself), its last 4 characters and the Stripe references. They don’t hold your name or email; Link keeps those with your order, and support looks there to find a lost key.

Why we use it: To send you your license key, find it again if you lose it, and end a license that is refunded.

Lawful basis: Performing our contract with you.

Update checks

An update check asks diskcensus.com for the latest version. It carries only the Disk Census version, in a census/ user agent, and nothing from your activation: no key, no hash of your Mac’s id. Our server sees your IP address, as with any request. Disk Census checks only when you ask, unless you turn on automatic checks in Settings, which look once a day.

Installing an update runs macOS’s own notarization check on it, which can contact Apple. Apple handles that under its own privacy policy.

Why we use it: To tell you when a new version is available and download it when you choose.

Lawful basis: Performing our contract with you.

Support messages

Your email address, your message, and anything you attach or tell us, such as your key’s last 4 characters, your Mac’s model or its macOS version.

Why we use it: To answer you and fix problems.

Lawful basis: Performing our contract with you, or our legitimate interest in supporting the people who use Disk Census.

Website visits

The servers that host this website keep standard logs: IP address, time, the page requested and browser type. Our license service never logs request contents, license keys or full IP addresses. We don’t add analytics, and we don’t build profiles of visitors.

Why we use it: To keep the website secure and running.

Lawful basis: Our legitimate interest in security and reliability.

Link takes your payment as merchant of record, through Stripe Managed Payments. At checkout and on your receipt the order is marked “Sold through Link”: Link is Stripe’s checkout. According to Link’s privacy policy (opens in a new tab), it collects your payment and transaction details along with order details such as tax amounts, refund or chargeback information and your conversations with Link support. It passes us your order and email address so that we can deliver your key. We never receive or store your full card number or other payment credentials.

Link and we are independent controllers: each of us decides how it uses the information it holds. To use your rights over information Link holds, see Link’s privacy policy or contact Link support (opens in a new tab).

You can also ask Link to delete your information (opens in a new tab). That removes your order from Stripe’s systems, including the copy in our Stripe account. Your license keeps working, but support can then no longer find a lost key from your email address: the key email you received is the only copy. Records we keep outside Stripe are covered by this policy; ask us to delete those too.

This website doesn’t set cookies, and it doesn’t use analytics, advertising or social-media tracking scripts. Its fonts are served from the site itself, not from a third-party font service. The Disk Census app has no analytics and sends no crash reports.

When you go to Link’s checkout you leave our site. Link may use cookies there; Link’s privacy policy explains how.

• Our processors, which handle information only on our instructions: Vercel, which hosts this website and our license service; Neon, which hosts the license database; and Resend, which sends the email with your key.
• Link (Stripe), which receives what you give it at checkout and handles it as its own controller, as described above.
• Authorities and advisers, where the law requires it or to protect our rights, and our professional advisers, who keep it confidential.
• A buyer or successor, if our business is sold or reorganised, with the same protections for your information.

We don’t sell personal information, and we don’t share it for advertising based on your activity across other sites.

We and our providers, including Link, Vercel, Neon and Resend, may process information in countries other than your own, including the United States. Where the law requires it, we rely on safeguards such as the UK International Data Transfer Addendum, the European Commission’s Standard Contractual Clauses, or an adequacy decision.

• Each Mac’s activation record (the hash of its hardware id, its model and dates): 12 months after its last check-in, its removal by support, or a refund, whichever is latest.
• Your license record (the key hash, its last 4 characters and the Stripe references): for as long as the license is valid, and 12 months after a refund or chargeback ends it.
• Salted IP hashes: 30 days.
• Support messages: for as long as we need them to help you and handle follow-ups, then we delete them.
• Website server logs: a short period, as set by our hosting provider.

Depending on where you live (for example the UK, the EEA, Switzerland or California), you may have the right to:

• ask what information we hold about you and get a copy;
• have it corrected or deleted;
• restrict or object to some uses, and receive it in a portable format;
• withdraw consent, where we rely on it; and
• not be treated worse for using these rights.

The hash of your Mac’s hardware id counts as personal information, and these rights cover it. Email us at support@diskcensus.com with your key’s last 4 characters or the email you bought with, so we can find your records. We may need to confirm it’s you, and we’ll answer within the time the law sets, usually one month. For information Link holds, contact Link support (opens in a new tab).

If you think we have handled your information wrongly, you can complain to your local data protection authority; in the UK, that is the Information Commissioner’s Office. We’d appreciate the chance to put it right first.

We use reasonable technical and organisational measures to protect the information we hold, and we limit who can see it. We store license keys only as hashes, and every answer our license service sends is signed, so a forged one can’t change your Mac. No system is perfectly secure. Because Disk Census runs on your Mac, protecting the Mac and its backups is partly up to you. If a breach affects you, we’ll tell you and the authorities as the law requires.

Disk Census isn’t aimed at children under 16, and we don’t knowingly collect their information. If you think a child has given us information, write to us and we’ll delete it.

We may update this policy as Disk Census or the law changes. The “Last updated” date at the top shows the current version. If a change is significant, we’ll give reasonable notice, for example on this site or by email to people who have bought a license. The License Agreement and Refund Policy are separate documents.

Privacy questions and requests: support@diskcensus.com.

Disk Census is made and licensed by Moiz, London, United Kingdom.