Overview
DuckDisk is a local-first, open-source macOS application operated by Qi Yang. DuckDisk does not operate a server that receives your disk scan results, cloud file metadata, or OAuth credentials.
Data DuckDisk accesses
- Local and SSH file metadata, including names, paths, sizes, types, and folder relationships.
- OneDrive and Google Drive account details such as display name, email address, account identifier, and storage quota.
- Cloud file metadata such as item identifiers, names, sizes, MIME types, parent relationships, and trash state.
- OAuth refresh tokens needed to reconnect to a cloud account.
DuckDisk does not download cloud file contents to calculate storage usage.
How data is used and stored
Metadata is used only to build the storage tree, calculate totals, update cached results, and perform actions you explicitly request. OAuth refresh tokens are stored in macOS Keychain. Scan indexes and connected-account records are stored locally on your Mac.
Cloud actions
When you choose to remove an item, DuckDisk asks Microsoft OneDrive or Google Drive to move that item to the provider's recoverable trash. DuckDisk does not permanently empty provider trash. No cloud item is changed without a user-initiated action.
Sharing and selling
DuckDisk does not sell personal data, use cloud account data for advertising, or share scan data with data brokers. Requests are sent directly from the app to Microsoft, Google, or the SSH server you configured. Those providers process requests under their own privacy policies.
Google API data
DuckDisk's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
Retention and deletion
Local scan caches remain until you clean the cache, disconnect the account, uninstall and remove DuckDisk's application data, or replace them with a new scan. Revoking Google Drive access from DuckDisk invalidates the saved Google token and removes that account and its cache from the Mac.
Website and updates
The DuckDisk website does not include DuckDisk-operated analytics or advertising trackers. The hosting provider and GitHub may process standard connection logs under their own policies. The app contacts GitHub only when you request an update check.
Contact
Questions or privacy requests can be sent to [email protected] or filed through the DuckDisk issue tracker.