I’m excited to introduce Paperweight, a local-first open-source desktop app I’ve been building to help people understand and reduce their digital footprint.

Your inbox is a paper trail of every company that has ever had your data. Every account you created, every service you tried, every online purchase. It’s all connected to your email. Most people have 100+ accounts they’ve forgotten about, each a potential security, or privacy risk. For me the final push was the Odido data breach in the Netherlands. I hadn’t been a customer for more than 8 years, but all my data was still in their systems.

What it does:

  • Account inventory — Maps every company that has ever emailed you, with risks classifications and recommendations for action.
  • Bulk unsubscribe — Find and unsubscribe from any marketing and mailing lists (auto RFC 8058 where supported).
  • Breach alerts — Alerts when any company you’ve been in contact with has been breached (via HaveIBeenPwned).
  • GDPR requests — Generates pre-filled GDPR requests in multiple languages.

Supports Gmail, Outlook, Apple Mail, Proton (via Bridge) and any other email provider via IMAP.

Privacy approach:

Everything runs on your machine. Email content, credentials, and connection details never leave your device. No telemetry, no cloud sync, no analytics. The code is fully open source and auditable on GitHub.

Most alternatives in this space all require your to share your data through their services. Some of them have actually been caught selling your data. Paperweight is the only tool I’m aware of that does this entirely local and is open-source.

Website

Feedback welcome! Thanks

  • 5 contributors, 2 of which are “Ai”’s.

    I suspect a -

    – Infected repo.

    Definitely a cool project if it’s not though!

    • I’ve followed his work before, he’s done a fair bit of open source, he knows what he’s doing. I’d put money on it not being slop. Just stamping “slop” on something after you spent 8 seconds looking at something is ignorant and rude.

      • The post text is dripping with it but I haven’t looked at the code. A lot of my complaining about slop is how people for whom English is not a strong language over-depend on it, kind of never developing a voice over time. Instead sounding like the Burger King support bot.

        I wouldn’t even know if the code was machine generated. I never tried that so I don’t recognize it if it’s not glaring.

        Code is out there though so maybe someone can port it into a Thunderbird addon or something

  • Great project. Thanks for sharing, and cool you chose to open source some / all of it. That said…

    Paperweight, a local-first open-source desktop app

    Are the paid features open source too? If so, then it’s really open source.

    If the paid features are not open source, then the project does not grant the 4 freedoms the FSF requires to recognize the project as open source.

    This is commonly known as open core (or open washing?).

    I’m not giving advice on what you should do, I’m only pointing out a possible incoherence between what you say and what you made.

    • Thanks for the reply! And good question. Yes, all code, including all paid features are open source too. Not just open core. There’s nothing proprietary. Some of the paid features are gated behind a license check, but it’s all part of the same repo and MIT licensed. It’s all there to inspect or fork if you want. The perpetual license however helps support development and gives the convenience of a ready-made build.

      We actually moved recently from GPLv3 to MIT to be fully permissive.

    • Looking at the project, the paid features are paywalled even if you spin it up yourself

      • Correct. But all code is there, so you can fork them out yourself if you want.