KityDisk

Privacy policy

Last updated: September 19, 2026

1. Controller

VCPF Service GmbH & Co. KG
Zugspitzstr. 112
82491 Grainau
Germany
Email: [email protected]

2. The KityDisk app

The app is offered on the Mac App Store by Markus Klahn, address as above. KityDisk does not process any personal data on our servers. The app has no internet features, no account, no analytics or advertising tools, and transmits nothing to us or third parties.

The app only reads the drives and folders you explicitly allow, to show file sizes, names and created/modified dates. This information stays on your Mac and is only held in memory while you use the app. The only thing stored is your folder access (as macOS bookmarks in the app's settings) so you are not asked again for every scan. You can delete it via “Reset Saved Folder Access”.

Apple handles purchase, payment, download and updates through the Mac App Store; Apple's privacy policy applies (apple.com/legal/privacy). We receive no personal data about you from Apple, only aggregated sales and crash statistics if you allowed sharing them in macOS.

3. This website

Hosting. This website runs on the controller's own server; there is no data processing agreement with an external hosting provider. When you visit, the server processes technically necessary connection data.

Cloudflare. Cloudflare is placed in front of the server for availability, encryption (TLS) and abuse protection. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your connection technically passes through Cloudflare, so your IP address and further connection data (time, requested address, browser type) are processed by Cloudflare before the request reaches our server. Cloudflare may transfer personal data to the USA; the EU standard contractual clauses apply and Cloudflare is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in secure and reliable delivery (Art. 6(1)(f) GDPR). More information: cloudflare.com/privacypolicy. The domain is registered with Cloudflare.

Server log files. For each request, IP address, time, requested page, browser type and operating system are logged briefly to deliver the website securely and to prevent abuse (Art. 6(1)(f) GDPR).

No cookies, no tracking. This website sets no cookies, uses no analytics or advertising services and loads no third-party content (no external fonts or scripts).

Email. If you write to us, we process your message and email address to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them when no longer needed and no retention obligations apply.

4. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a data protection supervisory authority. Just write to the address above.