Privacy Policy

Deutsche Fassung · In case of doubt, the German version prevails.

1. Controller

Chor Thongthip
Ronin Studios
Kantstr. 32
85356 Freising
Germany
Email: info@ronin-studios.de

2. The DiskDonut app

DiskDonut runs entirely locally on your Mac. The app requires no account, uses no cloud and sends no telemetry or usage data. For its analysis it only reads metadata of your files (names, sizes, dates). File contents are only read when you start the duplicate finder yourself; the comparison happens locally. Saved scans stay on your Mac. We receive none of this data.

Update check (direct edition only, optional): If you turn it on in Settings or check for updates manually there, the app fetches https://diskdonut.com/appcast.json from our server at most once a day to tell you about new versions. As with any website visit, the server processes your IP address and the time in its log files (see section 3); no other data is sent. Legal basis: Art. 6(1)(a) GDPR (consent by turning it on or triggering it); you can turn it off at any time. The App Store edition has no update check of its own.

If you buy DiskDonut Pro on the Mac App Store, the purchase is processed by Apple and Apple’s privacy policy applies. We do not receive personal data that identifies you.

If you buy via the direct download, payment is handled by [PAYMENT PROVIDER / RESELLER, e.g. Paddle, FastSpring]. The data required for the purchase and licence key (e.g. name, email address, payment and billing data) is processed. Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(c) GDPR (tax retention obligations). The licence key is then validated offline inside the app, without an internet connection. [OPEN: add the payment provider’s role, retention period and a link to its privacy notice.]

3. This website

Hosting and server log files

This website is hosted on a server of Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you visit, the server processes technically necessary data: IP address, date and time, requested page, amount of data transferred, referrer URL, browser and operating system. This serves the secure and stable operation of the website. Legal basis: Art. 6(1)(f) GDPR. Log files are deleted automatically after 14 days. Where required, a data processing agreement under Art. 28 GDPR is in place with the host. Cyprus is a member of the European Union, so processing takes place within the scope of the GDPR.

No cookies, no tracking

This website sets no cookies, uses no analytics or advertising services and loads no third-party content (e.g. no external fonts, no social media plugins). The language selection on the start page relies only on your browser’s language setting; nothing is stored.

Contact by email

If you email us, we process your details (email address, message content) to answer your request. Legal basis: Art. 6(1)(b) or (f) GDPR. We delete the data once it is no longer needed, unless statutory retention obligations apply. Our email is processed by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

4. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Please contact us at the address above.

You may also lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence. The authority responsible for us is: Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

5. Changes

We update this policy when the app, the website or the legal situation changes.

Last updated: October 29, 2026