Resources

Changelog

Paperweight V1 is here.

Your inbox knows where your data lives. Paperweight scans your email history to map your digital footprint, then helps you take back control and delete your data.

Map your digital footprint

  • Discover accounts, companies and services connected to your email
  • Find mailing lists and subscriptions
  • See known data breaches affecting services you use
  • Find personal information stored across your email history
  • Review and curate everything locally

Clean up your inbox

  • Unsubscribe from mailing lists
  • Bulk clean old and unwanted email
  • Move messages to trash or spam
  • Group cleanup actions to work through large inboxes faster

Take back control of your data

  • Create privacy and data deletion requests
  • Keep track of requests and follow-ups
  • Reduce old accounts and unnecessary data exposure

Connect your email

  • Gmail / Google
  • Microsoft / Outlook
  • Apple
  • Custom IMAP
  • Proton Mail via Proton Bridge

With presets for providers including Fastmail, Yahoo, Mailbox.org, Posteo, Zoho, GMX and others.

Use Paperweight with AI agents

Paperweight includes MCP access, so compatible AI agents can work with your locally indexed Paperweight data without needing direct access to your inbox.

Local-first and open source

Your inbox contains some of your most sensitive data. Paperweight processes it locally. Your emails and credentials are not sent to Paperweight servers.

The source code is available under the MIT license.


Thanks to everyone who tested it, reported bugs, contributed code, bought an early license, or simply followed along.

What's Changed

  • New Free / Pro model
  • Free now gives full historic sync
  • Pro unlocks cleanup actions, privacy requests, multiple accounts, and MCP
  • Improved action safety and bug fixes
  • Improved license & entitlement validation

Notes

  • Free: one email account, full history, discovery, and local curation
  • Pro: unsubscribe, trash, spam, bulk cleanup, privacy requests, multiple accounts, MCP
  • Existing Lifetime licenses remain permanently

This is probably our last release before V1.

What's Changed

Notes

Please read before enable AI access.

  • Paperweight ships a local MCP (stdio) server that only uses the same Paperweight data you already have on your machine.
  • The integration happens on your own device. There are no Paperweight services/APIs/etc.
  • AI Access is turned off by default. You can turn it on in Settings → AI Agent access
  • Access control defines if you want read only access, to help search for companies, personal data, and mailbox activity.
  • Or read & write which gives your agent the same cleanup actions as in the app to unsubscribe, trash, report as spam and sending out privacy requests.
  • The agent can read sender/receivers, message subject and previews and any App classifications. It does not read full emails or raw headers. This is similar to what you see in the app.
  • Personal data is masked by default and is redacted before being send to your agent.
  • I highly recommend to only use this with a local model (e.g. Ollama).

Transparency and risks

This is experimental. I highly recommend to only use this with a local model (e.g. Ollama) to keep Paperweight local-first. A model provider will be able to read what you send to it. Paperweight mask known personal data, but it might not be 100% accurate.

Sending a privacy request asks for approval in the agent, but depend on your agents tool-call approvals. Some agents auto-run tools. Use at own risk.

What's Changed

Before you upgrade

This release switches to a new analysis engine. On first launch after upgrading, every account does a full re-sync (including message bodies). Existing data, companies, settings, licenses, and past actions are unaffected, but expect a longer sync than usual.

Changes

  • New pii analysis engine by @wslyvh in https://github.com/wslyvh/paperweight/pull/49
    • Includes addresses, phones, IBANs, national IDs, cards, and more
  • New personal data page to review values, confirm what’s yours
  • New user profile to manage names, emails, phones, addresses, IDs, and payments
  • Receiver-address detection
  • Improved multi-language lexicons for better classification

Fixes

This has been a huge revamp of the analysis engine. Please report if you experience any issues!

Changes

  • Unseen reply badges - new unseen message badges when replies arrive on cases by @lendl in #44
  • Dashboard case tile - active cases needing attention shown on the dashboard by @lendl in #45
  • Account category filters - filter the accounts list by category by @lendl in #42
  • App storage management - manage local app data cache from Settings and Support
  • Minor cursor-pointer style fix by @lendl in #41
  • Minor badge count fix

Fixes

Mac auto-update - releases now ship the required update zip, and updater failures stay non-fatal.

Changes

Per vendor account email - minor fix that lets users set a per-vendor account email on data requests (e.g. hide-my-email aliases) which is used in the GDPR templates, and reminders. Note that this does not change SMTP from address. Just as account identifier.

Changes

GDPR case tracking - track data requests you send from Paperweight through the statutory response window.

  • Send requests from a vendor's Data requests tab, and starts tracking a GDPR case
  • New cases overview with familiar search, and filtering
  • Case detail with timeline, related messages, and statutory nudges at 14 / 30 / 60 days
  • Dashboard actions, reminder & follow-ups
  • Per-vendor cases on the account detail page

This is an initial version. Expect some rough edges, but would love to hear feedback.

Before you upgrade

Due to new folder sync, IMAP and Microsoft require a full re-sync on first launch after upgrading. That clears existing message data only. Companies, whitelist, license, and past actions (unsubscribe, trash, etc.) are kept. Expect a longer sync than usual.

Gmail accounts are unaffected.

Changes

  • Free tier scan increased from 30 to 90 days.
  • Copy Google & Microsoft OAuth sign-in links when the account is in another browser profile. Fixes #33
  • Full-mailbox scanning instead of inbox-only (IMAP, Microsoft, Gmail). Fixes #37
  • Custom GDPR recipient field and no-reply address filtering. Fixes #34
  • Improved sync reliability and stable message IDs across folder moves.
  • Added a light mode theme. Configurable in settings.
  • Minor fix in company view not resetting state on navigation.

Changes

  • Embed AppImage update information
  • First product release (non pre-release) for better update support

Changes

  • Fixed Linux AppImage build/runtime compatibility by pinning the AppImage toolset.
  • Allow to copy OAuth sign-in links for Google and Microsoft. Useful when targeting different account, or browser profiles different than the default browser.
  • Allow crypto payment, including Bitcoin, Monero, Zcash, Ethereum, and stablecoins.

Changes

  • Google sign-in is fully available again with Google’s official app verification. No temporary disable, verification warnings, or other OAuth workaround steps.

Changes

  • Added support for more email providers in the app: you can now connect Apple/iCloud and Proton Mail accounts.
  • Improved onboarding and add-account setup flows, with clearer provider selection and connection UX.
  • Expanded SMTP/IMAP support in the desktop app, including better handling of custom server settings and app-password style authentication.
  • Improved provider connection reliability across Gmail, Microsoft, IMAP, and SMTP paths.
  • Strengthened sync stability and account handling under the hood for more reliable background processing.
  • Updated Google connection messaging in-app during verification-related availability constraints.
  • Refined GDPR-related app data/templates and shared app-side privacy logic for clearer data-request workflows.

Changes

New Contributors

This is a minor version bump from v0.1.x to v0.2.0 and includes a breaking change to support the new multi-account architecture.

Breaking change (important)

  • You’ll need to re-connect your mailbox account(s) and a full, new sync
  • Any existing local database history from v0.1.x will be lost

Changes

  • Added multi-account support (breaking change: requires reconnecting and re-syncing your mailbox)
  • New Actions panel based on age, breach status, and email volume
  • Improved account detection and risk classification
  • Improved sync reliability and performance, including Microsoft Graph speed improvements
  • Improved account management UX, switching and flows
  • Improved whitelist workflows from account details
  • General cleanup, logging improvements, fixes and config updates

Contributors

First beta release(s) - thanks for testing!

Changes

  • Apple developer verification

First beta release - thanks for testing!

☑️ Minor fix

  • Updated Google scopes
  • Added Google activation prompt

First beta release - thanks for testing!

☑️ Minor fix

  • Fix spam & trash filters

First beta release - thanks for testing!

☑️ Minor fix

  • Exclude spam & trash from sync

First beta release - thanks for testing!

✨ What Works

  • Email sync (Gmail OAuth, Microsoft, IMAP)
  • Bulk unsubscribe from mailing lists
  • Account mapping (see which companies have your data)
  • Risk classification (high/medium/low)
  • Breach alerts (via Have I Been Pwned)
  • GDPR deletion templates

⚠️ What's Beta

  • Accounts view risk classification is experimental
  • First desktop app release - expect rough edges
  • No auto-updates (manual download for now)
  • Sync can take a few minutes for large inboxes
  • Some email providers might need app-specific passwords

📦 Installation

macOS

  1. Download Paperweight-0.1.0.dmg
  2. Drag to Applications
  3. Important: Right-click → Open (don't double-click)
  4. Click "Open" in security dialog

Windows

  1. Download Paperweight-0.1.0.exe
  2. Run installer

Linux

  1. Download Paperweight-0.1.0.AppImage
  2. Make executable: chmod +x Paperweight-*.AppImage
  3. Run: ./Paperweight-*.AppImage