Safety: what Viktor NEVER deletes

Viktor is "safe-by-design". Even if some cleanup rule got it wrong, there is a hard safeguard in the core that cannot be overridden — it protects the things that could hurt you.

Hard-protected (never deleted)

• Passwords and logins — Login Data, Web Data, Credentials, vaults (Vault, Protect).
• Sessions and cookies — Cookies, Session Storage, Local Storage, IndexedDB.
• Your settings and bookmarks — Bookmarks, Preferences, Favorites, history.
• Your data — Documents, Desktop, Pictures, OneDrive.
• Windows Event Log — winevt, .evtx files. The health check reads from these; deleting them would blind your own diagnostics.

Other principles

• Everything reversible — cleanup goes into the hole (7-day undo), startup is only disabled.
• Read-only diagnostics — the health check only reads, it never changes the registry/BIOS/disk.
• No dark patterns — no invented "errors", an honest score, an explanation for every action.
• Viktor doesn't fix hardware — for disk/RAM/BIOS it only advises, it doesn't touch it.

Try it yourself

Cleanup safety is also verified by the built-in test viktor selftest (a round-trip cleanup → hole → restore, including a check that protected files stay untouched).