Security at ClearKun
ClearKun is built on a local-first philosophy. Storage analysis occurs entirely on your Windows PC, isolating your personal documents, media, and filesystem from external servers.
Security Overview
Our core engineering principles prioritize local isolation, minimal cloud footprints, and human-in-the-loop control.
Traditional storage and disk cleaning tools often require broad system access, send telemetry payloads over the network, or perform destructive file deletions with one-click automation. ClearKun was engineered with an entirely different architecture:
Local-First Execution
Zero File Ingestion
User Confirmation
Security Architecture & Execution Boundary
A strict boundary separates local Windows storage analysis from minimal cloud APIs.
ClearKun Execution & Data Boundary
Filesystem analysis is performed locally on your Windows device. Only minimal required account and license metadata communicates with secure cloud APIs.
Local Storage Engine
Inspects filenames, sizes, extensions, timestamps via optimized OS APIs. Zero document/photo/video content ingestion.
Saved at %LOCALAPPDATA%\ClearKun\. Never uploaded or shared.
User reviews and explicitly confirms all cleanup operations. Zero unprompted background deletions.
Essential Cloud Services
Handles user sign-in, Google OAuth, and secure token issuance. ClearKun never receives passwords.
Stores user profiles, early access registration, and license tier states.
Local Processing Guarantee
Storage scanning runs natively on your machine without cloud streaming.
When you initiate a scan in ClearKun, the desktop client invokes native Windows filesystem APIs (FindFirstFileExW, GetFileInformationByHandleEx) to query file records directly from the NTFS / FAT32 volume manager.
Zero Cloud File Streaming
PROVED ARCHITECTUREData Boundaries
Explicit enumeration of what ClearKun accesses versus what remains strictly untouched.
- •File Paths & Names: To display storage locations (e.g.
AppData\Local\Temp). - •File Sizes & Disk Allocation: To calculate space savings and large file rankings.
- •File Extensions & Types: To categorize archives (
.zip), media (.mp4), or caches. - •Timestamps: Creation, modification, and last accessed dates for safety tier classification.
- •File Contents: We never read inside your PDF, Word documents, text files, or source code.
- •Photos & Videos: No pixel parsing, EXIF scraping, or visual processing.
- •Browser History & Credentials: We never read browser passwords, cookies, or history databases.
- •Keystrokes & Screen Data: Zero background recording, keylogging, or screen capture.
Authentication Security
Account identity is managed exclusively by Clerk with standard OAuth protocols.
ClearKun does not store user passwords. User authentication and session issuance are managed by Clerk.
Google OAuth 2.0
Backend Data Layer
Network Security & Encryption
All communication with web endpoints is strictly encrypted in transit.
Whenever the desktop application or website communicates with our infrastructure (for license verification or account management), all network requests are encrypted using modern Transport Layer Security (HTTPS / TLS).
Local Application Data & Paths
Exact locations where ClearKun stores local configuration and scan databases.
ClearKun stores application state in standard, user-isolated Windows application folders. You retain full access to inspect or delete these directories at any time:
%LOCALAPPDATA%\ClearKun\%LOCALAPPDATA%\ClearKun\storage_index.db%LOCALAPPDATA%\ClearKun\config.jsonFile Deletion Safety & Human Confirmation
Understanding our 5-tier safety matrix and interactive confirmation safeguards.
User Review and Confirmation Policy
CRITICAL SAFEGUARDClearKun 5-Step Deletion Flow
- 01Local ScanTraverse file metadata
- 02ClassificationAssign safety tier
- 03User ReviewInspect items in UI
- 04ConfirmationUser confirms action
- 05Safe RemovalSend to Recycle Bin / Purge
Vulnerability Disclosure & Security Contact
Responsible disclosure procedures for security researchers and users.
If you discover a potential vulnerability or security issue within the ClearKun desktop client or website, we encourage responsible disclosure. Please reach out directly to our engineering team:
Explore the ClearKun Trust Center
Transparent, human-readable documentation of our architecture, privacy boundaries, browser storage, and legal terms.
Security Overview
Learn how ClearKun isolates processing locally on Windows, secures authentication via Clerk, and safeguards your computer.
Privacy Policy
Detailed breakdown of our zero file content ingestion policy, data boundaries, retention periods, and user control rights.
Cookie Policy
Transparent inventory of essential authentication cookies and local storage tokens. No behavioral advertising tracking.
Terms & Conditions
Understand the terms of software usage, personal licensing, one-time pricing, early access provisions, and deletion responsibilities.