Your inbox knows where your data lives. We help you take back control.

Every account you create, every service you sign up for, every online purchase is connected to your email address. Most people have 100+ accounts they've forgotten about, creating security risks and privacy exposure.

Paperweight scans your inbox to map your digital footprint, then helps you take back control and delete your data.

Local-first. Your data stays on your computer. Respecting your privacy by default.

• Marketing/Bulk unsubscribe — Find an unsubscribe from marketing and bulk mailing lists in minutes
• Account inventory — Discover which vendors and services have your data
• Breach alerts — Know when companies you use get breached (via haveibeenpwned.com)
• GDPR deletion support — Generate data deletion requests to reduce exposure
• Local-first — Your emails and settings stay on your machine
• Privacy-respecting — No data sent to external servers
• Open development — Built in public, source code available for audit

• ✅ Custom IMAP
• ✅ Google / Gmail
• ✅ Microsoft
• ✅ Apple
• ✅ Proton Mail (via Bridge)

IMAP Presets: Proton, Yahoo Mail, Fastmail, Yandex, Zoho, Mailbox.org, Posteo, GMX.

1. Download latest release for your platform
2. Connect your email
3. Scan your inbox in ~2 minutes
4. Review your footprint; use Pro to unsubscribe and delete emails

Discover, inspect, and curate your digital footprint for free. Upgrade to Pro to execute cleanup and support open-source development.

• Free: One email account, full-history sync, account and mailing-list discovery, breach and personal-data overviews, and local curation
• Cleanup Pass: Full Pro access for 30 days of focused cleanup. One payment, no renewal. Community support on GitHub.
• Paperweight Pro: Maintain your privacy all year, with email support included.

Both paid plans unlock unsubscribe, trash, spam, bulk cleanup actions, privacy requests and follow-ups, multiple email accounts, and MCP access. Card and manual crypto payments are available for both plans.

View plans and pricing →

Released binaries ship with OAuth credentials configured. Building from source needs your own.

yarn
cp .env.example .env   # then fill in the three IDs below
yarn dev

OAuth values are baked in at build time (electron.vite.config.ts). Empty .env values compile to empty strings and auth fails at runtime.

Google / Gmail — https://console.cloud.google.com/

• Create OAuth 2.0 credentials, application type "Desktop app"
• Enable the Gmail API
• Add scope https://www.googleapis.com/auth/gmail.modify on the consent screen
• Add yourself as a test user while the app is in testing mode
• Set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET in .env

Microsoft — https://portal.azure.com/

• Register an app, supported account types "Personal + work/school"
• Authentication → add "Mobile and desktop applications" with redirect URI http://localhost
• API permissions → Microsoft Graph → Delegated → User.Read, Mail.ReadWrite, Mail.Send, offline_access, openid, profile
• Set MICROSOFT_CLIENT_ID in .env (no secret; the flow uses PKCE)

IMAP accounts need no OAuth env vars.

Feedback, bug reports, and PRs are welcome.

Language lexicons — Paperweight's analysis engine classifies mail (purchases, updates, promotions) and finds unsubscribe links using per-language phrase lexicons. English and Dutch are curated; other languages need native speakers. Adding or improving a language is a single-file data contribution — no engine knowledge required. See analysis/src/data/lexicons/README.md for the rules.