Privacy Policy

Last updated 13 September 2026

RollScrub is a tool for looking through your own photographs. Building it to send any of them anywhere would defeat the point, so it doesn't. This page says precisely what does and doesn't leave your Mac, in plain language.

The app

Your files never leave your Mac. RollScrub reads photos and videos to compare them byte for byte. It does that entirely on your computer. No file, no part of a file, no filename, no folder path, no thumbnail and no checksum is ever transmitted anywhere.

There is no account, no sign-in and no telemetry. RollScrub does not track how you use it, does not phone home on launch, and contains no third-party analytics or advertising code of any kind.

The app makes network connections in exactly two situations:

Checking for updates

RollScrub asks rollscrub.com whether a newer version exists, using the Sparkle update framework. That request carries the app version and standard information any web request includes, such as your operating system version. We store a daily count of these checks per version and per country. We do not store the address it came from.

Activating a licence

If you buy a licence and activate it, the app sends your licence key and your Mac's name — the name shown in System Settings, often something like "Ricardo's MacBook Pro" — to rollscrub.com, which passes both to Creem, who issue and verify the key. The Mac's name is what lets you see which machines a licence is active on, and deactivate one when you replace it. Nothing else is sent, and this happens only when you activate, re-validate or deactivate a licence. We do not keep a record of these requests. If you never buy a licence, the app never contacts Creem at all.

Your licence key is stored in your Mac's Keychain and nowhere else.

This website

The site sets no cookies, uses no third-party analytics, and carries no trackers, advertising or social widgets.

We count daily totals only: page views, downloads, update checks, clicks on the Buy button, visits to the post-purchase thank-you page, and the domain a visitor arrived from. Each is stored as a number per day, per country, with no way to connect one visit to another or to a person.

We do not store IP addresses. We store the two-letter country code the request came from and nothing more precise. When we record where a visitor arrived from, we keep only the site's domain — never the full address, which can carry search terms and other sites' information.

Those daily totals are split in two, between requests that look like a browser and requests that look automated — most of this site's traffic is crawlers and scanners, and counting them as readers makes the numbers meaningless. The split is decided by reading the browser identification your request already carries, and that text is never stored: it is looked at once, in memory, and only the resulting tally is written down. It is not used to build a profile, and it cannot be, because nothing identifying is kept alongside it.

The site is served by Cloudflare, which as part of delivering it processes requests, including IP addresses, on our behalf for security and routing. That is Cloudflare's ordinary operation as a hosting provider; we neither receive nor retain those addresses. See Cloudflare's privacy policy.

Buying

Purchases are handled by Creem, who act as merchant of record. They collect your payment details, billing information and email address, and they process that data under their privacy policy. We never see or store your card details. We can see order records — your email address, what you bought, and your licence key — in order to provide support and honour refunds.

If you email us, we keep that email so we can answer you. We won't add you to a mailing list.

Your rights

Because the site stores only anonymous daily counts, there is no personal data of yours in it to access, correct or erase — there is nothing that could be matched back to you.

Where we do hold personal data — your order record and any email you've sent us — you can ask what we have, ask for a copy, ask for it to be corrected, or ask us to delete it. Write to support@rollscrub.com and we'll respond within 30 days. For order and payment records, Creem is also a controller and can be contacted directly.

Children

RollScrub is not directed at children and we do not knowingly collect data from anyone under 16.

Changes

If this policy changes, the updated version appears here with a new date. If a change ever meant collecting something genuinely new, it would be announced on the site rather than quietly edited in.

Contact

RollScrub is made by Ricardo Sanchez in Seattle, Washington, USA.
support@rollscrub.com