Privacy Policy

Updated content: September 12, 2026 by the Karuzip development team. Test dates and screenshot versions are stated separately.

This Privacy Policy explains how personal information and other data are handled by the Karuzip software (“Karuzip” or the “app”) and the website at karuzip.com (the “website”).

1. The Karuzip app

• Karuzip does not collect personal information or send personal information or usage telemetry to the operator.
• File contents and file names are not uploaded or sent outside your computer. Archive browsing, extraction and compression are performed locally on your computer.
• Karuzip does not display advertising or perform behavioral tracking or telemetry.
• The edition downloaded from the official website may contact GitHub Releases to check for and download software updates. These requests do not include the contents or names of your files, or in-app usage telemetry. GitHub may process routine connection data, such as an IP address and request metadata, under the GitHub General Privacy Statement.
• Updates to the Microsoft Store edition are handled through Microsoft Store rather than Karuzip’s GitHub-based updater.

Settings and records stored on your device

The app stores settings, recent-file information, processing results and automation configuration locally. Diagnostic information is saved to a file when you choose to export it; it is not uploaded automatically. Passwords used for a manually opened archive or a one-off CLI operation are not saved to settings, history or logs. However, an optional password registered in the watched-folder automation wizard is saved in Windows Credential Manager for later automation runs by the same Windows user. Closing the app or stopping a watcher does not delete that credential.

2. The Karuzip website

Server logs

When you visit the website, the hosting provider’s servers may record standard access-log information, such as your IP address, access date and time, requested page, and browser information. Where these logs are available to the operator, the operator uses them only to investigate service problems and prevent unauthorized access or abuse.

Our own basic page counts

We count how often each website page is displayed on our own server, separately from Google Analytics. The browser sends the page path, page type and language. We keep daily totals in Japan time. This counter does not use visitor IDs or analytics cookies, collect URL query strings, search terms or referrers, or link visits across pages.

The server checks the incoming IP address against our internal-access rules, then stores only an internal/external category. This counter does not store visitors’ IP addresses, IP hashes or User-Agent values. A random value for each document prevents duplicate submissions; it is kept without a link to the page or IP and removed at the next collection after 48 hours. Daily totals are kept for up to 366 days and are not shared with Google or independent advertising or analytics providers.

Basic counts run without a prior consent step. You can stop them below; Do Not Track also disables them. Browsers that previously declined all analytics remain excluded unless you separately enable basic counts. Only your preference is saved in localStorage.

Google Analytics 4

The Japanese and English pages use Google Analytics 4, provided by Google LLC, with Google Consent Mode. Unless Do Not Track is enabled, the website loads the Google tag with analytics storage denied by default (analytics_storage=denied). Before you make a choice, or when analytics cookies are switched off in Cookie choices, Google receives measurement signals without analytics cookies or a persistent user identifier. These signals may include the page viewed, referrer, timestamp, browser and device information, consent state, and a random value generated for that page load. After you select “Accept” or enable analytics cookies, Google Analytics uses cookies containing pseudonymous client and session identifiers to link page views and measure site interactions.

The website does not intentionally send your name, email address, file names, file contents, or other information that directly identifies you to Google Analytics. Google states that Google Analytics 4 uses an IP address at collection time to derive approximate location information and discards the IP address before it is logged or stored. Google Signals, advertising personalization and advertising storage are disabled for this website.

Download measurement

After you accept analytics, the website may create a server-signed download-context cookie to distinguish a download initiated from the website from an unverified direct request. This cookie contains pseudonymous Google Analytics client and session identifiers, issuance and expiration times, and a one-way digest of the browser’s User-Agent value.

The cookie is valid for five minutes, is marked HttpOnly, Secure and SameSite=Lax, and is sent only to the /download path. JavaScript cannot read it. It does not contain your name, email address, or file information.

A request with a valid signed cookie may be recorded in Google Analytics as a download request attributed to a website session. A request without a valid signature may still be counted in aggregated form as an unattributed download request (download_request_unattributed). This measurement records an installer request, not completion of the download or installation. Before analytics cookies are enabled, after they are switched off, or while Do Not Track is active, the page links directly to the installer with ?direct=1 and does not use the measurement redirect.

Site search

The site search box runs entirely in your browser against a static index file; the website has no search server. After analytics cookies are enabled, the words you type are sent to Google Analytics together with the page language, the number of results, which search box you used, and — when you open a result — its position and path. Strings that look like an email address are replaced before sending, and the query is truncated at 100 characters. Searches that return nothing are also recorded, so we can see which pages are missing and write them. Before analytics cookies are enabled, after they are switched off, or while Do Not Track is active, search still works and search terms and interactions are not sent.

Language preference

When you explicitly choose Japanese or English, the website stores that choice in your browser’s local storage (localStorage) so that it can suppress further language suggestions in that browser. The stored value is limited to the selected language code.

The language-switching feature does not send that stored value to the website server or to Google. localStorage values do not expire automatically; you can remove the preference by clearing the website’s stored data or by selecting another language.

Fonts

The website’s fonts are hosted on karuzip.com. The website does not contact Google Fonts to display them.

3. Your analytics choices

Your analytics-cookie choice is stored in this browser’s localStorage. It does not expire automatically. You can change it below at any time. Switching analytics cookies off removes Google Analytics cookies that are readable by the website, switches installer links back to the direct ?direct=1 path immediately, and stops detailed interaction, search and attributed-download measurement. Cookieless Google Analytics measurement signals remain active, and previously transmitted analytics data is not deleted by changing this setting.

Because the signed download-context cookie is HttpOnly, JavaScript cannot delete it directly. When you switch analytics cookies off, the site sends a best-effort same-origin request asking the server to expire that cookie. If a network or script failure prevents the request, an already-issued cookie may remain until its five-minute lifetime ends. If your browser sends a Do Not Track value of “1,” Do Not Track overrides a saved choice: the website does not load Google Analytics, does not show the consent banner, does not initialize the signed download-context cookie, and does not send download-measurement events.

Cookie choices do not affect access to the website or installer. Standard hosting logs may still be created when pages or files are requested, and switching analytics cookies off does not stop cookieless Google Analytics measurement or aggregated server-side download statistics that are not tied to a website session. For more information about Google’s handling of data, see the Google Privacy Policy.

4. Contacting us

If you contact us by email or through GitHub Issues, the operator uses the information you provide only to review and respond to your inquiry. Information posted in a public GitHub Issue is publicly visible and is also handled under GitHub’s privacy policies.

Questions about this Privacy Policy may be sent to support@karuzip.com or submitted through GitHub Issues.

5. Changes to this policy

This Privacy Policy may be revised without prior notice when necessary. The latest version will be published on this website.