Safety and Privacy

Safety and Privacy

(Türkçe: Güvenlik ve Gizlilik)

Never touched

• The Windows folder (except Windows\Temp), Program Files, /usr /etc and similar system trees
• ~/.ssh, ~/.gnupg, ~/.aws, ~/.kube
• Filesystem roots, your home folder itself (its contents may be cleaned), Draxbyte's own data
• Symbolic links and junctions are neither followed nor deleted

The categories

Colour	Meaning
🟢 Safe	Old temp/log/cache files and folders
🟡 Careful	Regenerable (node_modules, build output) or big/old files the rules cannot identify
🔴 Keep	System/app files, big files changed in the last 24 h — cannot be selected

Checks right before every delete

1. Not a red item and not a protected path
2. Still exists and is not a symbolic link
3. Unchanged since the scan (size + modified time; for folders: no newer file inside)
4. Not locked by another process (Windows)

If any check fails the item is skipped and the report says why.

Deleting

• Recycle Bin by default — reversible with Cleanup → Undo (Windows/Linux)
• Dry run reports what would happen without touching anything
• Delete permanently needs an extra confirmation (you type DELETE)

What touches the network

Situation	Network
AI off (default)	None. No telemetry, no update check, no account
AI on	Only when you press Fetch models, Test connection or Send in the “Ask AI” dialog
Clicking a link	Opens in your browser only when you click it

What is sent to an AI provider: the file path, type, size, age in days and the rule hint — never file contents. You see the exact text before each request. Answers are cached locally by path + size + modified time.

API keys are stored as plain text in ~/.draxbyte/config.toml; the DRAXBYTE_API_KEY environment variable is safer and takes priority.

Signed releases

Release exes are signed with a self-signed certificate (proves integrity, does not remove the SmartScreen warning). Verify with the SHA256 in the release notes, or build from source.