Skip to content
Wombit
Get Pro for $4.99

Draft for review before launch. It isn't legal advice.

Privacy

Last updated: 27 October 2026

Wombit is a Mac app that measures and explains what is using your disk. It does that work on your Mac. This page says what leaves your Mac, what doesn't, and what this website collects.

The short version

  • File names and paths never leave your Mac. The app scans, explains and cleans up on your Mac only. The explanations come from the rules catalog built into the app, not from a server.
  • There is no account. You don't sign in to use the app.
  • The app sends crash and error reports to Sentry, with file names, paths, your name and your Mac's name taken out, and anonymous usage statistics to PostHog: which of its pages you open, and when a scan, a cleanup or an uninstall finishes. Both are always on.
  • This website doesn't use cookies. It counts visits and clicks with PostHog, without storing anything in your browser.

What the app sends, and when

  • When you activate Pro: your license key and a random name the app makes for this Mac, such as “Mac 7F3A”, sent to Dodo Payments, the company that sells the license, so it can count the Macs using your license. It doesn't include your name, your Mac's own name or anything from your disk. The app sends the same key and Dodo's number for that activation about once a week to check the license is still valid, and when you deactivate the Mac. Like any request, these show your IP address to Dodo Payments.
  • When it checks for updates: a request for the list of versions from this website, once a day if you let it check automatically (it asks the second time you open it), or when you choose Check for Updates…. Like any request, it shows your IP address and the app's version to the server that answers it. An update you choose to install downloads from this website's download server, which Cloudflare hosts like the rest of the site.
  • When a macOS update is waiting: the menu bar item asks Apple's software update service how big the update is, once per update, the same way System Settings does. It sends nothing about your files.
  • When something goes wrong: when the app crashes, stops responding for a few seconds or runs into an error (a scan that fails, say, or a license it can't read), it sends Sentry, the crash reporting service, a report of where in its code it happened, with the app's and macOS's versions and your Mac's model. A crash is sent the next time the app opens. File names, paths, your user name and your Mac's name are taken out before it's sent, and it holds no screen contents, logs or record of what you did. This is always on. Sentry's own privacy policy covers what it does with the reports.
  • Usage statistics: the app tells PostHog, a product analytics service, when it's installed, updated or opened and when you switch away from it, which of its pages you open, and when a scan, a cleanup, an uninstall or emptying the Trash finishes, with how many items and how much space. It also says when you ask for a Best guess, when you open the checkout and when you activate or deactivate Pro. Each event carries a random ID the app makes for this Mac, the app's and macOS's versions, your Mac's model, its language and its time zone, and PostHog works out your approximate location from your IP address. They never include file names, paths, your name, your Mac's name or your license key. This is always on. PostHog's own privacy policy covers what it does with them.
  • If you use Send Feedback: Help › Send Feedback… opens a draft email in your own mail app, with the app's version, macOS's version, your Mac's model identifier, its kind of processor and whether Full Disk Access is on. It adds no file names, paths, your name or your Mac's name. Nothing is sent until you send it, and then it's an ordinary email to support@wombit.app.

The app doesn't send what it finds on your disk, what you choose to remove, or its cleanup history. That history stays in the app's own folder on your Mac, where you can read it or delete it.

What the app reads on your Mac

To measure your disk, the app reads the names, sizes and dates of files and folders. With your permission (Full Disk Access), it can measure folders macOS keeps private. It reads the contents of a few files that describe other apps' data, such as the device name in an iPhone or iPad backup, so it can show which device a backup belongs to. None of this leaves your Mac.

When you buy Pro

Dodo Payments handles the payment as the merchant of record, so your card details go to Dodo Payments and its payment processors, never to us. Dodo Payments shares with us what we need to help you with your order and license key: your name, your email address, your country and the details of the order. Dodo Payments' own privacy policy covers what it does with your data.

When you've paid, the checkout brings you back to this website with your license key in the page's address, so the page can show it. The page removes it from the address right away; like every address, it also passes through Cloudflare's short-lived request logs. The usage statistics get the page's address without it. This website also gets a notice from Dodo Payments for each order, refund or dispute; it keeps only the order's numbers, amount and status in Cloudflare's short-lived logs, never your name, email address or license key.

This website

The website is hosted on Cloudflare. Like any web server, it receives your IP address and browser details with each request, which Cloudflare keeps in short-lived logs. The site doesn't set cookies. It remembers your choice of light or dark theme in your browser's local storage, which stays on your device.

The site counts its visits with PostHog: the pages you view, the links and buttons you click, the page that sent you there, and your browser, device type and screen size. It stores nothing in your browser to do it. Instead of a cookie, PostHog tells visitors apart with a hash it makes from your IP address, then removes the IP address itself, so the statistics don't say where you are. Addresses are sent without what follows the ? in them, apart from campaign tags such as utm_source, so a license key in an address never reaches PostHog.

Your rights

You can ask what we hold about you, ask us to correct it, or ask us to delete it. The crash reports and usage statistics are anonymous and can't be tied to you, and otherwise we hold only what Dodo Payments shares when you buy, so most requests are about your order and license key.

Contact

The app and this website are made and sold by Rohit Saluja. Write to support@wombit.app with any question about your data.