Privacy you can verify.
Each claim below says what Desorb does and how you can check it yourself, without trusting us.
Cleanup runs on your PC.
Scanning, filtering, archiving and deleting all happen inside the app on your computer. There is no Desorb server that fetches or deletes your content.
Deletion requests go straight to the platform.
The request that removes a message is sent from your machine to the platform's own servers, using your session.
The Desorb server holds a small account record. Nothing from your content.
The app contacts our server for your account and license: your account code, a hash that identifies your PC, the app version and, for Discord, how many items it removed. It does not send your content, platform tokens or filters.
Credentials are encrypted at rest.
Session tokens are stored encrypted with Windows DPAPI, which ties them to your Windows user account. Desorb never asks for or stores your password.
Logs stay local and are redacted.
Diagnostic logs are written to your PC, credentials are stripped from them, and they are never uploaded. They do not contain message content.
The lock screen is a convenience, not encryption.
Locking hides the interface and blocks actions, optionally behind a passphrase. It does not encrypt your data on disk. Use Windows disk encryption for that.
Limits
Desorb is closed source. This page describes behavior you can observe from the outside. For anything it does not cover, write to legal@desorb.app.