Privacy Policy

Last updated: 2 September 2026

DiffiCat comes in two forms with very different privacy footprints: a desktop app that runs entirely on your machine, and a browser version at app.difficat.com that runs on our servers. This page describes both, plus this website.

The desktop app

The desktop app collects nothing. It has no telemetry and no analytics, it never uploads your URLs, screenshots, or reports, and everything it produces stays on your own disk. Its only network activity is fetching the pages you ask it to compare and checking for app updates.

This website and the browser version

Both difficat.com and app.difficat.com load Google Analytics 4. It uses cookies to measure how the pages are used — page views, approximate location, browser and device characteristics. We use this to understand which parts of the product people find and use; we do not sell or share this data. See Google's privacy policy for how Google processes it.

What the browser version stores

When you run a comparison in the browser version, the pages you name are fetched by our servers, and the resulting reports and screenshots are stored in Google Cloud Storage so you can view them while your session lasts.

• When sign-in is enabled, stored reports and screenshots are scoped to the Google account you signed in with, and are not readable by other users. We receive your Google account's basic profile (name, email address, picture) solely to identify your session; we never see your Google password.
• When sign-in is switched off, runs are tied to an anonymous per-browser session cookie instead — no account holds them.
• Usage limits (comparison runs and page discoveries per hour, and a daily page budget) are enforced per session and per IP address; the counters store hashed identifiers, not raw IP addresses.

The URLs you submit are used only to run the comparison you asked for. Requests to localhost, loopback, and private-network addresses are refused.

Credentials for protected sites

If you supply HTTP basic-auth credentials for a site under test, the desktop app keeps them on your machine only. The browser version uses them for the duration of the run to fetch the protected pages and does not store them with the report.

Your choices

• Use the desktop app if you want nothing stored anywhere but your own disk.
• Block or clear cookies to opt out of analytics; the product works without them.

Changes

If this policy changes, the new version will be published at this address with an updated date.