Privacy policy
Draft, not yet in force
Summary: We can't read your secrets. We store account info and metadata to run the service.
What we can't see
Secret values, the keys that encrypt them, your private key and your recovery phrase. They are encrypted or generated on your devices and are never sent to us in a readable form.
What we store
Your GitHub username, email and avatar. Project, service and environment names. Key names. Padded value sizes. Version messages. Who has access to what. IP addresses and device names for security.
Why we store it
To run the service: to show your projects, enforce access, build templates and diffs, send invitations and security alerts, and keep an activity log.
Who we share it with
Infrastructure providers that host the service and send email. We don't sell personal data.
Retention
Activity logs are kept for a limited period. A deleted project is removed for good after 7 days. Deleting your account removes your identity, devices and memberships.
Your choices
You can export activity as CSV, delete projects and delete your account from the app. Write to hello@storeenv.app for anything else.