Privacy policy

Updated September 4, 2026.

DUPESPACE is local-first: file analysis stays on your device, and filenames, paths and contents do not become server or advertising data.

Browser folder analysis

The web analyzer can read only files you explicitly provide through the browser file picker or a drag-and-drop action. Filenames, relative paths, file contents, content fingerprints and results are processed in browser memory and are not uploaded to DUPESPACE. The web app has no permission to move, overwrite or delete local files.

Previews and reports

Visible image groups use temporary device-local Blob URLs for one representative preview. They are released when results change or the page closes. CSV reports are generated and downloaded inside your browser and may contain private paths and fingerprints. Do not publish unredacted reports.

Analyzer network boundary

The /local, /merge and corresponding English routes use a stricter Content Security Policy. They do not load AdSense, third-party analytics, external frames or social trackers.

Windows application

The desktop app contains no behavior telemetry. Scanning, content comparison, previews and reports run on your computer. Update checks read public GitHub Release information and verify the installer size and SHA-256 before asking you to install it.

Legacy session migration

The hosted cloud-cleaning feature has been retired. Its old entry attempts to revoke existing OAuth tokens and clears encrypted cookies after successful revocation. If revocation fails, the encrypted cookie is retained only for another revocation attempt until its original expiry; it cannot restore file access. Devices that never revisit cannot be remotely cleared. Old scan, preview, trash and deletion APIs no longer accept file operations. You may also revoke access manually in the original account’s third-party access settings.

Advertising

Public marketing, download and guide pages use Google AdSense Auto Ads. Google and its partners may use cookies under their policies. Advertising code does not load in the private analyzer workspaces and cannot access file lists, fingerprints, previews or CSV reports.

Contact

Report issues through GitHub Issues. Include a version, reproduction steps and redacted errors; never post passwords, tokens, private filenames or full reports.