GitHub - wslyvh/paperweight: Paperweight scans your inbox to map your digital footprint, then helps you take back control and delete your data. Local-first and open source.
github.com
Paperweight scans your inbox to map your digital footprint, then helps you take back control and delete your data. Local-first and open source. - wslyvh/paperweight

I’m excited to introduce Paperweight, a local-first open-source desktop app I’ve been building to help people understand and reduce their digital footprint.

Your inbox is a paper trail of every company that has ever had your data. Every account you created, every service you tried, every online purchase. It’s all connected to your email. Most people have 100+ accounts they’ve forgotten about, each a potential security, or privacy risk. For me the final push was the Odido data breach in the Netherlands. I hadn’t been a customer for more than 8 years, but all my data was still in their systems.

What it does:

  • Account inventory — Maps every company that has ever emailed you, with risks classifications and recommendations for action.
  • Bulk unsubscribe — Find and unsubscribe from any marketing and mailing lists (auto RFC 8058 where supported).
  • Breach alerts — Alerts when any company you’ve been in contact with has been breached (via HaveIBeenPwned).
  • GDPR requests — Generates pre-filled GDPR requests in multiple languages.

Supports Gmail, Outlook, Apple Mail, Proton (via Bridge) and any other email provider via IMAP.

Privacy approach:

Everything runs on your machine. Email content, credentials, and connection details never leave your device. No telemetry, no cloud sync, no analytics. The code is fully open source and auditable on GitHub.

Most alternatives in this space all require your to share your data through their services. Some of them have actually been caught selling your data. Paperweight is the only tool I’m aware of that does this entirely local and is open-source.

Website

Feedback welcome! Thanks

  • apotheotic (she/her)@beehaw.orgEnglish
    5·
    9 hours ago

    Any scope for a version of this that installs via docker compose and runs a webui for us home server users? Edit: oh huh I missed that it’s not FOSS paid. 69 bucks for a “perpetual” license that only gets updates to v1 is a bit DIRE

    • wslyvh@lemmy.mlOP
      1·
      10 hours ago

      No plans on a Docker compose for now, but feel free to submit an issue. RE licensing, there’s some discussion on it below. FOSS describes software licensing, which is all MIT. There are 2 features “gated” behind a license check, which supports development and gives the convenience of a ready-made build (which have costs involved). But all code is open, and you’re welcome to modify/fork out if you prefer to run your own.

      • apotheotic (she/her)@beehaw.orgEnglish
        1·
        9 hours ago

        I wanna be clear I’m more than happy to pay for a perpetual license to good software. Its the cessation of support past v1 that concerns me. Thanks for making a cool tool, either way, whether I end up using it or no

        • wslyvh@lemmy.mlOP
          1·
          8 hours ago

          That’s fair. I’m still experimenting with pricing/licensing models, so appreciate the feedback. To be clear, the license grants you permanent use and at least all updates, including V1 which is documented on Github. Not making any promises what’s after yet, because in all honesty. I don’t know yet what a V2 or other features would look like. Just trying to be transparent on what you’re getting right now + upcoming updates. We’ll see what’s after, and open to ideas

  • Axolotl@feddit.it
    4·
    10 hours ago

    Will you ever switch to other git forges? Honestly i think github right now is a bad place, it’s being enshittified very fast by microslop, i switched to Codeberg and i think it’s great, they also make switching to codeberg easy

  • exist@sopuli.xyz
    2·
    11 hours ago

    Looks cool, I haven’t hit an issue with old accounts like that but there are certainly some that could fuck me over. Will try it out later.

    • wslyvh@lemmy.mlOP
      31·
      8 hours ago

      Sure, like most projects I use AI assistance a lot for most of my work these days, ngl. Its helps me plan, research and code new ideas/features and makes a lot of my work easier. Having said that, I fully understand and share people’s feelings about yolo, vibe-coded slop. I’ve been a software engineer for 20+ years. AI helps with a lot, but also feels like the honeymoon phase is wearing off actually. It doesn’t give me the joy of building stuff. I still test, review and ship everything myself. You can check my Github history that I’ve been doing this way before recent AI hype.

      Either way, the idea and execution is 100% me. I’m building something I want, use, and care about myself. Whether I’ve used AI is not too relevant, imo. It’s that all alternatives have been caught selling your data (Unroll), heavily rely their centralized services or require you to give up your data in order to remove it. Which is ironic. Paperweight is the only tool I’m aware of that does this entirely local and is open-source.

      P.S if its quality you’re worried about, Paperweight has been audited through Google’s CASA assessment and Apple’s developer verification (admittedly, not a super high bar).

  • warmaster@lemmy.world
    301·
    1 day ago

    Great project. Thanks for sharing, and cool you chose to open source some / all of it. That said…

    Paperweight, a local-first open-source desktop app

    Are the paid features open source too? If so, then it’s really open source.

    If the paid features are not open source, then the project does not grant the 4 freedoms the FSF requires to recognize the project as open source.

    This is commonly known as open core (or open washing?).

    I’m not giving advice on what you should do, I’m only pointing out a possible incoherence between what you say and what you made.

    • wslyvh@lemmy.mlOP
      29·
      23 hours ago

      Thanks for the reply! And good question. Yes, all code, including all paid features are open source too. Not just open core. There’s nothing proprietary. Some of the paid features are gated behind a license check, but it’s all part of the same repo and MIT licensed. It’s all there to inspect or fork if you want. The perpetual license however helps support development and gives the convenience of a ready-made build.

      We actually moved recently from GPLv3 to MIT to be fully permissive.

    • Encom@lemmy.world
      31·
      1 day ago

      Looking at the project, the paid features are paywalled even if you spin it up yourself

      • wslyvh@lemmy.mlOP
        73·
        1 day ago

        Correct. But all code is there, so you can fork them out yourself if you want.

        • wyldrstallyns@lemmy.dbzer0.com
          26·
          11 hours ago

          Hol’up. “All code is there” after one pays to access it, you mean?

          edit: Ah, it feels like that other place, where downvotes are kbarbarians’ impotent ire. The perfect environment for valid questions. Love to see it.

    • wslyvh@lemmy.mlOP
      3·
      12 hours ago

      Hi, nice to see you here! Would love to hear your thoughts. And thanks for standing up in the comments. Much appreciated :)

  • ohshit604@sh.itjust.worksEnglish
    79·
    19 hours ago

    5 contributors, 2 of which are “Ai”’s.

    I suspect a -

    – Infected repo.

    Definitely a cool project if it’s not though!

    • AtHeartEngineer@lemmy.worldEnglish
      112·
      18 hours ago

      I’ve followed his work before, he’s done a fair bit of open source, he knows what he’s doing. I’d put money on it not being slop. Just stamping “slop” on something after you spent 8 seconds looking at something is ignorant and rude.

      • ggtdbz@lemmy.dbzer0.com
        42·
        16 hours ago

        The post text is dripping with it but I haven’t looked at the code. A lot of my complaining about slop is how people for whom English is not a strong language over-depend on it, kind of never developing a voice over time. Instead sounding like the Burger King support bot.

        I wouldn’t even know if the code was machine generated. I never tried that so I don’t recognize it if it’s not glaring.

        Code is out there though so maybe someone can port it into a Thunderbird addon or something. I think this is a very cool project

    • TrueDahn@lemmy.mlEnglish
      12·
      11 hours ago

      Yeah, I’m getting that vibe here too. OP is not replying to either your comment or the other comment asking what contributions AI have to this project. If there’s no AI in this, then surely OP can at least bother to reply affirming there’s not, especially when they replied to almost every other comment on the post.

      • Axolotl@feddit.it
        31·
        10 hours ago

        They finally replied https://lemmy.ml/comment/25776478 Also, i can see why they wouldn’t answer to such a comment, opening the comments and seeing a big ass image of a “SLOP” sign does not feel good at all, especially after you spent time making the thing