Privacy policy

Last updated: 22 October 2026. Applies to the program LycanZip (the installer, the zip packages and the Microsoft Store version) and to this web site.

In short

LycanZip does not collect, store on a server, sell or share any personal data. It has no telemetry, no advertising, no tracking and no accounts. It works fully offline.

What stays on your computer

• Settings and presets: your choices (theme, language, compression presets, recent folders) are saved in a file on your computer, in the program folder (portable) or in %LOCALAPPDATA%\LycanZip (standard and Store).
• Log file: a short log of what the program did (errors, versions). It uses file names only; full paths are written only if you switch on the detailed log with full paths yourself. It is never sent anywhere. You can read and delete it (lycanzip-cli info shows where it is).
• Crash reports: if the program crashes it writes a report on your computer so that you can attach it to a bug report if you wish. Nothing is uploaded.
• Temporary files: files opened from an archive are unpacked into a temporary folder and removed afterwards.

Your files

LycanZip reads and writes the files you ask it to. It does not upload them or send their names or content anywhere. If you use the antivirus scan, the content of the files is handed to the antivirus program that is installed on your computer through the Windows Antimalware Scan Interface; what that program does is described by its own vendor.

Network requests

LycanZip makes no network request by itself, with one optional exception: a check for a new version. When it is switched on (it is off by default; the Microsoft Store version is never checked, the Store updates it), the program downloads one small public file, aegisulf.com/lycanzip/latest.json, that tells the latest version number. The request contains no identifier, no settings and nothing about your computer or files. An installed copy (made by the installer) that has this check switched on also downloads the update itself from aegisulf.com/lycanzip/updates/, checks its signature, and installs it only when you choose; the request is as anonymous as the one above. As with any web request, the server that hosts the file (GitHub Pages) sees the IP address of the request in its own logs; LycanZip has no access to those.

The second case is something you start yourself: Look up on VirusTotal (in More options, in the menu of a file in an archive and in the hash values window). LycanZip calculates the SHA-256 of the file and opens virustotal.com in your web browser at the page of that hash. Only the hash is part of the address; the file is not uploaded and LycanZip uses no VirusTotal account or API. VirusTotal and your browser see the request as with any web page you open. If VirusTotal does not know the hash, that does not mean that the file is safe.

This web site

The site has no cookies, no analytics and no third-party scripts or fonts. Its pages are served by GitHub Pages, which may keep technical logs as described in GitHub’s privacy statement.

Children

LycanZip does not collect data from anyone, including children.

Changes and contact

If this policy changes, the date above changes and the new text is published here. Questions: open an issue on GitHub.