Privacy

Who runs Diskling

Diskling is made by Shameem Reza, an independent developer based in Germany. I decide what this website collects and how it’s used, so under the GDPR I’m the data controller. If you have a question about this policy or your data, write to hello@diskling.com.

What this website collects

• Your email, if you join the waitlist. I store it with the date you joined and which form you used. It’s used for one thing: a single email when your place in the private beta is ready.
• Your message, if you use the contact form. I store your name, email, the topic you picked, your message, and the date. A copy goes to hello@diskling.com so I can read it and reply.
• Page counts. Cloudflare Web Analytics counts visits without cookies. It sees the page you opened, the site that sent you here, your browser and device type, and your country. It doesn’t build a profile of you or follow you to other sites.
• What every web server sees. To deliver a page, Cloudflare receives your IP address and basic browser details, and uses them to block attacks. When you send a form, Cloudflare also keeps short technical logs that help me fix errors. Those logs are kept for no more than 7 days. The site doesn’t store your IP address with your email or message.

Why I use it

• The waitlist runs on your consent (Art. 6(1)(a) GDPR). You give it when you join, and you can take it back at any time by asking to leave.
• Messages rely on legitimate interest (Art. 6(1)(f) GDPR). When you write to me, I have a legitimate interest in reading your message and answering it.
• Page counts and logs rely on legitimate interest too (Art. 6(1)(f) GDPR). I need them to keep the site working and safe, and to see which guides people read.

What this website doesn’t do

No tracking cookies, no advertising, no social media trackers, and no newsletters. I don’t sell your personal data or share it for advertising, including “selling” and “sharing” as California law defines them.

There’s no cookie banner because the site doesn’t set cookies. If Cloudflare’s security check ever shows you a challenge page, Cloudflare may set a short-lived security cookie to remember that you passed it. That cookie is strictly necessary and isn’t used to track you.

Services that help run the site

Cloudflare processes this data on my behalf under its data processing addendum. I don’t use any other analytics, advertising, or marketing service. If I use an email service to send the beta invite, I’ll name it here before anything is sent.

How long I keep it

• Waitlist emails: kept until everyone on the list has been invited to the beta or has asked to leave. Then I delete the list. If you ask to leave, I delete your email right away.
• Contact messages: deleted after 12 months, from the database and from my inbox. Sooner if you ask.
• Database backups: Cloudflare keeps backups of the database for up to 30 days, so anything I delete is gone from them within 30 days.
• Technical logs: no more than 7 days, then Cloudflare deletes them.
• Page counts: kept by Cloudflare as totals that don’t identify you.

Your rights

Wherever you live, you can ask me to:

• show you the data I hold about you, and give you a copy
• correct it if it’s wrong
• delete it
• stop using it, or withdraw your consent for the waitlist

Write to hello@diskling.com. I’ll answer within 30 days. To make sure a request is really yours, I may ask you to send it from the email address it’s about. It’s free, and asking won’t change how you’re treated.

If you live in California, this covers your rights under the CCPA to know, delete, and correct your data, and to opt out of its sale or sharing. I don’t sell or share it, so there’s nothing to opt out of.

You can also complain to a data protection authority. The one responsible for me is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI) in Wiesbaden, and you can also go to the authority where you live or work. I’d still like to hear from you first, so I can put it right.

Where your data is processed

Cloudflare runs its network around the world, so your data may be processed outside the country you live in, including in the United States. Cloudflare handles these transfers under its data processing addendum, which includes the Standard Contractual Clauses that EU and UK law use to protect data sent abroad. I may also read your message from a different country than yours.

Keeping it safe

Everything you send to this site travels over HTTPS. The waitlist and messages sit in a private Cloudflare D1 database that is only reachable from my Cloudflare account.

Children

This website isn’t directed at children under 16, and I don’t knowingly collect their data. If you think a child has sent me their details, write to me and I’ll delete them.

The Diskling app

Diskling isn’t released yet. This section explains how it’s being built, and it will be updated with the app’s final behavior before launch.

The app scans your disk on your Mac. File names, folders, and sizes stay on your Mac. It connects to the internet only to check your license, check for updates, and download updated safety rules. Crash reports are off unless you turn them on.

Changes to this policy

If this policy changes, the date at the top changes too. Bigger changes also get a note in the build log on the blog. If a change affects data you already gave me, I’ll ask for your consent again where the law requires it.

This policy takes effect on September 29, 2026.