1. No Data Collection

Cloakspire is a locally installed desktop application. All database files, passwords, tokens, and metadata are stored directly on your computer's storage drive in an encrypted SQLite database. We do not run server backends, and we do not collect or upload your secrets.

2. Zero Telemetry & Phone Homes

We do not track your usage, feature engagement, or operating system details. The application operates fully offline and does not call home. When you use cloud sync features (e.g. pushing to Vercel), the app sends encrypted secrets directly from your local machine to the third-party platforms via their official HTTPS APIs.

3. Website Visits

Our marketing website uses minimal, GDPR-compliant analytical tracking without cookies to monitor page traffic. If you purchase a license key, your billing details and card transactions are processed entirely by Stripe. We do not store or see your raw credit card information.

4. License Key Validation

When you enter a Pro license key, the app communicates with our checkout partner to verify the purchase. This verification checks only the validity of the key and stores no personal information or usage metrics.

5. Changes to This Policy

We may update this policy as new local-first sync features are developed, but the core foundation will remain the same: we will never build features that upload your decryption keys or unencrypted vault files.

Last Updated: July 19, 2026