What we store, what we never store. Last updated July 2026.
Your account email (from Google or GitHub OAuth), the files and folders in your workspace, and the names and descriptions of your secrets.
Secret values. They live only in the .env file on your machine and are never sent to our servers.
Payments are processed by Stripe. Your card data never touches our servers.
We use a single session cookie to keep you signed in. No tracking cookies.
Want your account and data deleted? Email [email protected] and we will take care of it.