Privacy policy

This policy explains exactly what UnPack sends, why, how long it is kept, and how to stop it. It is written to be read rather than to be agreed to, so it names the actual fields rather than describing them in categories.

UnPack runs entirely on your own computer. It reads the packages you open and writes the files you extract. It never uploads your packages, their contents, their file names, or the paths they came from. Nothing you open leaves your machine.

1. Who is responsible for your data

iRex Studio LLP is the data controller (or, under India’s Digital Personal Data Protection Act, the data fiduciary) for everything described here. Our registered address and contact details are in section 12.

2. What you give us, and when

The first time you open UnPack, it asks for your name and email address, and optionally what you build, which Unity versions you use, and your role. Nothing is collected before you have seen that screen and agreed.

The optional fields can be skipped, and skipping them changes nothing about how the application behaves.

3. What the application reports as you use it

UnPack sends counters when you open a package and when you extract one. In full, each report contains:

• Whether the action was opening or extracting
• How many files were involved, and how many bytes in total
• How many assets of each type — for example forty-two materials, eighteen models
• How many warnings the package produced while being read
• The application version and your operating system version
• A random identifier generated by your installation

What is never sent: file names, folder paths, package names, file contents, thumbnails, or your IP address. The counters describe the shape of the work, never the work itself.

The installation identifier is a random value created on first run. It is not derived from your hardware, your network, or anything else that would survive a reinstall or identify the same person on another machine. It exists so we can tell one installation from another and so a retry does not create a duplicate record. Because you gave us your email at setup, that identifier is linked to you — we say so plainly rather than describing the data as anonymous, which would not be accurate.

4. What we do with it

• Decide which features to build next, from what people actually use
• Find packages the reader handles badly, from the warning counts
• Know which Unity versions and operating systems still need supporting
• Report aggregate totals publicly — how many developers, how many packages, how much extracted. These are always sums across everyone and never name an individual.

What we do not do: we do not sell your data, we do not share it with advertisers, we do not use it to build a profile of you for marketing, and we do not use it to train machine learning models.

5. Turning it off

Open Settings in the application and switch off data sharing. It takes effect immediately and permanently: the application stops making the request at all, rather than sending an empty one. Every feature continues to work exactly as before — nothing is withheld, degraded, or nagged about.

6. The website

The website sets no advertising cookies and runs no third-party analytics or tracking pixels. When you use the download button we record the time, the referring page, and a one-way hash of your IP address so we can tell one visitor from another without storing the address itself. The hash cannot be reversed.

Signing in to the admin dashboard sets one cookie. It holds a signed session token, is strictly necessary for signing in, and is used by nobody but us.

7. Where your data is processed

Application and website data is stored with Supabase, and the website is hosted by Vercel. Both may process data on servers outside India, including in the European Union and the United States. Both are bound by their own contractual data protection terms, and we transfer only the fields listed in this policy.

We use no other processors. There is no advertising network, no analytics vendor, and no data broker involved at any point.

8. How long it is kept

Everything described in this policy is kept until you ask us to delete it. We do not delete data on a schedule.

We would rather say that plainly than publish a retention period we do not enforce. When you do ask, we delete all of it — profile, counters, ratings — and section 9 explains how.

9. Your rights

You may ask us to:

• Show you everything we hold about you
• Correct anything that is wrong
• Delete all of it, which we will do in full and permanently
• Export it in a machine-readable format
• Withdraw consent, which you can also do yourself in Settings

Email support@irexstudio.com and we will respond within thirty days. We will not ask you why, and we will not try to talk you out of it.

If you are in the EU or UK, our legal basis is your consent under Article 6(1)(a) GDPR, given on the setup screen and withdrawable at any time. You may also complain to your national supervisory authority. If you are in India, the same applies under the Digital Personal Data Protection Act, 2023, and you may raise a grievance with us first at the address in section 12.

10. Security

Everything is transmitted over HTTPS. Data is stored with access restricted to a server-side key that is never sent to a browser, and the database denies all direct access by default. IP addresses are hashed with a secret salt before storage and the raw address is never written down.

11. Children

UnPack is a professional development tool and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with information, write to us and we will delete it.

12. Contact and changes

Questions, requests, or complaints go to support@irexstudio.com.

iRex Studio LLP
Plot No. 103 (21/A), 24th Street, C Block,
Sakthi Nagar, Nerkundram,
Chennai, Tamil Nadu 600107, India

If we change what is collected or why, we will update this page and change the version of the setup screen, so the application asks again rather than assuming an older agreement still covers it. Agreement to an old policy is not agreement to a new one.

UnPack is not sponsored by or affiliated with Unity Technologies or its affiliates. Unity is a trademark or registered trademark of Unity Technologies or its affiliates in the U.S. and elsewhere.