What Leita keeps, and what it sends.

This policy is dated 26 October 2026. Librium LLC makes Leita. Polar Software, Inc. processes a purchase, as the payment section describes.

The application

Leita does not send the contents of your files. Leita makes network requests for receipt activation, release checks and downloads you enable or request, and webhooks to an address you add. A webhook can include this computer's name, the place you are watching, and, if you allow it, paths inside that place. A path can contain a user name. Scanning, charts, search, manual cleanup, a current scan's CSV or JSON, and opening records already on the computer do not need any of these requests and do not need a paid plan. The licence is what draws that line: free for everyone, including organisations, and Pro for tracking, automation and professional reports.

Adding a signed licence on the computer sends nothing. The licence is checked there, offline. Activating a receipt key sends an HTTPS POST to https://mordaunt.dev/leita/activate. The body is JSON with a single field, the licence key. The User-Agent is leita/ followed by the version. The answer is the signed licence. Leita stores the receipt key locally alongside the signed licence. If the stored licence fails signature verification, Leita tries that saved key once when the app opens to fetch a replacement. If the request fails, it keeps the stored licence and explains the failure; a later launch may try again. A valid signed licence is checked offline without contacting the server.

Checking for a newer release is off unless you turn it on in About. With that choice, Leita checks once when the app starts and once a day while it stays open. It does not install or replace the program on its own. You can still check from About, or with leita update --check. leita update and Update in About replace the program only when you ask. A check reads public release metadata. An update you ask for also downloads the new program. The User-Agent is leita/ followed by the version. The request carries nothing else that names you, the computer, or the disks, and it carries no scan.

A webhook is sent only to an address you add in Monitoring, or with leita monitor webhook add. Each new alert, and a test when you ask, is a POST to that address. The address is HTTPS, or HTTP only when it is on this computer. The User-Agent is leita/ followed by the version. The message can include this computer's name, the place you are watching, when the alert was raised, a sentence describing it, and the alert's measurements: percent used, free space, total space, a day count, growth and the limit you set. It can also include a summary of that scan. Paths of folders and files inside the place are included only if you allow them for that webhook. The place itself is named either way. The request also names the alert, a delivery number, the time it was signed, and a signature made with the secret shown when you added the webhook. Leita does not send that message anywhere else. One your server has not accepted yet waits on this computer and is tried again later. One still waiting after 7 days is dropped.

What stays on the computer

Scans, settings, the licence and the deletion record stay on this computer. On Linux, recording which folders change is off until you turn it on. The logs are one file for each filesystem, in /var/lib/leita/journal. Each file stores that filesystem's mount point. A change record stores the time and a hash of the folder's path, not the path. Records older than 30 days are removed. Turning recording off removes the logs.

This website

These pages do not load a tracking script, and they do not set an analytics cookie. A theme choice is saved in local storage in the browser, on the device, under the name leita-theme. It is not sent to the server.

The server writes an access log. Before the line is stored, the client address is masked to a /24 for IPv4 and a /48 for IPv6, and cookies are removed. GoatCounter reads that log to count which pages browsers open. It leaves out clients that identify themselves as tools, including curl, git, and Go. The counts stay on this server. The dashboard is not on the public internet.

The support form

The support form asks for your name, a reply email, and a message. An operating system and an app version are optional. The message is stored on this server until it is delivered to the person who makes Leita, and that delivery is the lasting copy. A delivered message is deleted from the server after 30 days. A message that has not been delivered yet stays until it is.

The form accepts five messages an hour for a network address masked the same way as the access log. The browser does a short calculation before a message is sent, which limits automated mail. Fields that are hidden on the form are there for that same reason. One that is filled in is discarded and not stored.

Payment

A paid plan is sold by Polar Software, Inc., the reseller and merchant of record. Polar collects the payment, any tax, and the billing details, and Polar issues the receipt. Polar's privacy policy is at polar.sh/legal/privacy-policy ↗. Librium LLC does not receive the card number. Librium LLC keeps the licence record for a paid plan: the plan, the order reference, and the paid-through date. That record is what decides which versions keep Pro.

Release notes

Release notes are optional. Joining the list does not download Leita, create an account, or buy a plan. Buying a plan does not add you to the list.

The address is stored only after you confirm, together with the wording you agreed to and the time you confirmed. A request that is not confirmed is kept until the link expires, which is two days, and then it is dropped.

Notes go out for occasional meaningful releases. A note says what changed, who it is for, and what is free or paid, and it links to the notes and the download. The message has no tracking image. The links are the pages themselves.

Unsubscribe stops release notes only. It does not stop a plan, a receipt, or licence mail. Polar sends those. A bounce or a spam complaint is not mailed again, and that fact is kept.

The signup page is release notes.

Contact

Questions about this policy go through the support form. The terms and the refund policy sit beside it.