Privacy Policy
Updated 13 November 2026 · English
What stays on your PC, what our account service processes, and the choices you have.
1. Controller and scope
Barry Burgmeijer, Willem de Vlaminghstraat 62, 1335 PT Almere, the Netherlands, is responsible for DesktopMom’s processing described here. Contact barry.burgmeijer@gmail.com for privacy questions or requests. This policy covers the Windows app, this website and accounts.desktopmom.com. Paddle and Google also process data for their own services under their respective policies.
2. Your files stay on your computer
DesktopMom examines file names, extensions, paths, sizes and timestamps locally to organise your files. Settings, exclusions and action history are stored on your computer. Normal sorting and cleanup do not upload your files, their contents or scan lists to our account server.
Your own cloud-sync settings may send files or changes to services such as OneDrive. That is separate from DesktopMom’s account service. If you voluntarily send a screenshot, file or log for support, we receive the information it contains. Remove unnecessary personal information before sharing it.
3. Online data and purposes
Accounts: email address, internal account ID, creation and login times and account status are used to create and operate your account. The legal basis is performing our agreement or taking steps at your request before entering into it.
Optional Google login: we receive a Google account identifier and your email address and verification status. We do not request access to Gmail contents, Drive files or contacts, and do not receive your Google password. We use these details to provide the login method you choose.
Devices and access: internal device IDs, device names, linking and activity times, revocation status and authentication records support account security and Pro access. Account requests also identify the app version. This processing supports delivery of the service and our legitimate interest in securing it.
Subscriptions: we hold the account-to-purchase link, Paddle customer, subscription and transaction IDs, price and product references, status, dates, amounts, currency, taxes and adjustments needed for access, billing support and administration. The bases are the agreement and any applicable legal record-keeping duty. Our account database does not store full card details or card security codes.
Security: servers receive connection data including IP addresses. The account service uses hashed identifiers to limit repeated requests and records security and administrative events. Technical logs may contain connection information. Our legitimate interests are preventing misuse, protecting accounts and resolving faults.
Support: we receive your email, message and attachments. Account and purchase support is part of our agreement; answering other questions and resolving reported issues serves our legitimate interest in assisting users. We do not treat a support request as marketing consent.
Currency: the app can use your Windows region locally to suggest EUR or USD. The account service receives the currency and billing interval, not GPS coordinates. Paddle collects the location and tax information it needs for checkout.
4. Local storage and diagnostics
Settings, history and diagnostic files may remain on your computer after uninstalling the app. You control these local files; contact us if you need removal instructions. Our deletion of server records does not automatically delete data on your device.
The Windows app protects saved sign-in credentials using Windows encryption tied to your user profile. This is distinct from browser cookies. Locally generated performance reports are not automatically uploaded as telemetry. If you share one for support, it may contain app and Windows versions, display information and performance measurements.
5. Service providers and recipients
We use TransIP services for hosting and sending account emails. These services handle the account, message and technical data necessary to provide them. Access is limited to authorised administration and support activities.
Google provides optional sign-in. Our support address uses Gmail, so messages and attachments you send there are also processed through Google for receipt, storage and replies. Paddle acts as Merchant of Record for checkout, payments, invoicing, subscriptions and fraud prevention and supplies the records needed for Pro access and administration. Google and Paddle are independent controllers for their own processing.
We may disclose data where required by law or a valid legal demand. We do not sell personal data. Signing in or buying Pro does not by itself share your local files with Google or Paddle. See Google’s privacy policy and Paddle’s privacy policy.
6. International processing
Google and Paddle may process data outside the European Economic Area. Their privacy policies describe their processing locations, legal entities and transfer arrangements. For transfers for which DesktopMom is responsible, applicable data-protection safeguards must be in place, such as an adequacy decision or appropriate contractual safeguards. Contact us for information about the arrangements relevant to your data and how to obtain a copy or explanation. This policy does not claim that all data stays within the Netherlands or the EEA.
7. Cookies and communications
This landing page does not set cookies or use browser storage for tracking. Its fonts and images are served locally. The interactive illustration runs in your browser and does not access your files. There are no advertising pixels or analytics scripts in this website package.
The account website uses the necessary “desktopmom_session” cookie for login and security, with a session lifetime of up to 24 hours; a new session can be created when you sign in again. Our policy for cookies set by DesktopMom is a maximum lifetime of 30 days after placement or renewal, using a shorter period where sufficient. This is not a 30-day retention limit for accounts, subscriptions or app credentials.
Following Google sign-in or opening Paddle checkout involves their services, which may use their own cookies or similar storage with different lifetimes. Their processing is explained in their policies. Non-essential technologies requiring consent must not be activated without that consent. Blocking necessary storage may prevent login.
Account, security and service emails are sent as needed. Paddle may send payment-related emails. Creating an account is not consent to a marketing newsletter.
8. Retention and deletion
We retain data only while it is needed for the purpose described. The following periods and criteria distinguish the types of records; the cookie lifetime is not used as a general retention period.
Account and device records: kept while the account or device link is needed to provide access. Account deletion is handled on request, subject to resolving an active subscription, outstanding claims or a legal duty. Where deletion cannot immediately cover a particular record, we explain the reason and retain only what is necessary.
Temporary authentication data: expired verification and temporary session records are removed by the account service’s daily cleanup. Persistent device credentials are retained while the link remains needed; revocation prevents further use.
Account audit records: the daily cleanup removes events older than 90 days. Records needed for a specific security incident or legal claim may be retained separately for that purpose.
Technical logs and support messages: retention depends on resolving the reported issue, security investigation, follow-up and any related claim. Messages or attachments no longer needed for these purposes should be removed rather than kept for unrelated future use.
Payment records: subscription and transaction information is retained as needed to manage access, renewals, cancellations, refunds and disputes and to meet applicable accounting obligations. Such obligations do not justify retaining all account data indefinitely. Paddle has its own retention responsibilities.
Backups: protected recovery copies may temporarily contain deleted data until replaced or removed. They are used for recovery, not routine account access. Deletion requests must also be respected when restoring a backup. Contact us for the status of your specific deletion request, including any remaining recovery copies.
Local app data remains under your control until you remove it.
9. Security and your rights
We use measures including HTTPS, restricted administrative access and protected Windows credentials. No system offers an absolute security guarantee. Report suspected issues without sending passwords, verification codes or unnecessary sensitive information.
You may request access, correction, erasure, restriction or portability where applicable. You may object, on grounds relating to your situation, to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.
Email barry.burgmeijer@gmail.com. We may make a proportionate identity check; do not send an identity document unless specifically needed and requested. We normally respond within one month. An extension of up to two further months is available only where the GDPR allows it, with reasons provided within the first month. Account data can also be requested through the account export function.
You can complain to the Dutch Data Protection Authority or the competent authority in your EEA country of residence or work. Requests about data Google or Paddle controls independently may also be sent directly to them.
10. Automated decisions and changes
File sorting follows your chosen rules. Pro access is linked technically to subscription status; contact us for human review of an incorrect access decision. DesktopMom does not use your file contents to build advertising profiles.
We update this policy when processing changes. Material changes are communicated appropriately before the new processing begins. Updating a policy does not itself create consent for a new purpose.