this post was submitted on 13 Aug 2026

49 points (98.0% liked)

Privacy

50637 readers

749 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago

MODERATORS

Paperweight v0.5: Map your digital footprint, with pii analysis, and GDPR tracking (lemmy.ml)

submitted 2 weeks ago* (last edited 2 weeks ago) by wslyvh@lemmy.ml to c/privacy@lemmy.ml

11 comments fedilink hide all child comments

A few months ago I shared Paperweight here. An open-source desktop app that scans your inbox to map out your digital footprint.

Every account you create, every service you sign up for, every online purchase is connected to your email address. Most people have 100+ accounts they've forgotten about, creating security risks and privacy exposure.

Local-first. Your inbox is scanned on your own device, your data never leaves it, and there is no account or cloud component.

Since last time, a lot has changed:

New pii analysis engine to check addresses, phones, IBANs, national IDs, cards, and more
Improved multi-language lexicons for better classification
Track GDPR data requests you send fromPaperweight
Improved sync, receiver, hide-my-email aliases, and message tagging
Fully verified builds for Apple, Windows and Gmail OAuth connections
Several minor improvements and bug fixes

Links

Github https://github.com/wslyvh/paperweight
Website https://www.paperweight.email/

top 11 comments

sorted by: hot top controversial new old

[–] Pika@sh.itjust.works 20 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

it sounds promising but, ultimately I'm put off by the change to GPL to MIT you did back in july. I'm seen too many projects burned by that change. Generally the flow ends up being project becomes MIT, project gets acquired, project gets moved to be closed source/w payment model, creating a fracture of two different products, one that is owned by the company and one that is maintained by the community. In my opinion, It isn't worth the time contributing or learning a system that has the potential to just be rug pulled once it gains traction.

Don't take me wrong, I firmly get why the change was done but, it doesn't change my thoughts on it

[+] wslyvh@lemmy.ml -6 points 2 weeks ago (2 children)

I understand the concern, but MIT has been very intentional to signal the opposite of what you're worried about. Paperweight runs fully local. Everything works without any back-end or external services. No one can turn this into some paid SaaS to lock features. It already passes the walk-away test and there's literally nothing to rug and if the project ever goes into a direction you don't like you don't lose access or need anyone's permission.

While GPL theoretically gives you the same opportunity, I feel like it adds some overhead and potentially locks out genuine contributors.

And especially in the age of AI, code is cheap and if someone wants to build a closed Paperweight, the license is not going to stop them.

[–] Maroon@lemmy.world 13 points 2 weeks ago (1 children)

You are a talented dev. But I feel you don't fully grasp the protection that GPL gives to those who truly contribute. I am keen in trying this and I genuinely hope you are convinced to relicense this to GPLv3.

[–] wslyvh@lemmy.ml 4 points 2 weeks ago* (last edited 2 weeks ago)

I probably don't. I know copyleft vs permissive can be heated debates and I don't have a very strong opinion. My decision and reasoning is mostly based/aligned with https://shazow.net/posts/permissive-vs-copyleft/

At the current stage, and as solo dev, I don't believe that either licensing is realistically going to have any meaningful difference. There are plenty of cases where copyleft didn't prevent capture. And permissive projects that thrived above corporate versions.

But I'm curious to learn and appreciate the feedback. Can you elaborate? What's the main concern. What assurances, or protections do you hope to get from GPL? Is it about using the project, or contributing to the project?

[–] Axolotl_cpp@feddit.it 1 points 2 weeks ago

the license is not going to stop them.

The license give you the opportunity to stop them though, you can take legal actions if you want

[–] JensSpahnpasta@feddit.org 7 points 2 weeks ago (1 children)

That does look interesting - did someone here take a look at the code to ensure that this really private information is not getting exfiltrated?

[–] wslyvh@lemmy.ml 2 points 2 weeks ago

Currently at around 280 Github stars and a few contributors. And here's some more context https://lemmy.ml/post/47559040

I understand you don't want to take my word for it, but I can assure you the App uses no external services.

[–] mas@feddit.fr 3 points 2 weeks ago (1 children)

At first, I thought it was an application to capture the data we provided and the GDPR requests we made. It would have been a good idea, because a lot of data is not transmitted by email and a lot of organizations use their own site to manage GDPR requests.

It's a shame to see this project hosted on GitHub, it's a little contradictory.

It's interesting though, but I can't test it, unfortunately.

[–] wslyvh@lemmy.ml 2 points 2 weeks ago

The App does help you find what data is shared where, but it is indeed based on the data that is shared over email. Which might not include everything, no. But at least it'll flag the account instead of being some, old account you forgot about.

I know a lot of companies tend to push you to their forms. Which can be helpful for identification, but you don't have to follow they process. They're legally obliged to honor requests via email. The app helps you to track them.

I know Github has its flaws, but using for convenience. Not sure how it impacts the App.

[–] warmaster@lemmy.world 2 points 2 weeks ago (1 children)

Damn, I had forgotten I wanted to try it, thanks for the reminder!

Very cool idea!

[–] wslyvh@lemmy.ml 1 points 2 weeks ago

Thank you! Let me know when you get to it. Always open to hear feedback :)