Legal
Privacy Policy
Last updated: June 17, 2026
The short, human version
Your data is yours. We use it to run DeskDumpfor you, full stop. We don't sell it, we don't rent it, and we don't track you across the web with analytics or ad pixels. Your vault secrets are encrypted before they ever touch our database, and you can turn on end-to-end encryption so that not even we can read them.
This Privacy Policy explains what information DeskDump("DeskDump," "we," "us," or "our") collects, how we use it, and the choices you have. It applies to DeskDumpand any related pages and services (the "Service").
1. Information we collect
Account information
When you create an account we collect your name, email address, and a password. Authentication is handled by our auth provider, and your password is salted and hashed, we never see or store it in plain text.
Content you create
We store the content you put into the Service so we can show it back to you: customers, projects, notes, calendar events, chat messages, tags, and credentials you save to the vault. You decide what goes in. Vault secrets are encrypted with AES-256-GCM before being written to the database and are only decrypted on demand for you. If you turn on end-to-end encryption, vault secrets are encrypted in your browser using a key derived from a vault passphrase that we never receive, so we cannot read those secrets at all.
Billing information
If you subscribe to a paid plan, payments are processed by Stripe. We do not receive or store your full card number, Stripe does. We keep a record of your subscription status, plan, and billing events so we can give you access to what you paid for.
Technical information
Like virtually every website, our hosting and infrastructure providers process basic technical data (such as IP address and request logs) to deliver pages, keep the Service secure, and prevent abuse. We use a single first-party cookie to keep you signed in. It is essential to the Service and is not used for advertising.
2. What we track
Nothing beyond what is described above. There are no third-party analytics, no advertising pixels, no session recorders, and no cross-site trackers in DeskDump. The only cookie we set is the one that keeps you logged in.
3. How we use your information
- To provide, maintain, and operate the Service for you.
- To authenticate you and keep your account secure.
- To process payments and manage your subscription.
- To respond to support requests and send essential service messages (for example, email verification or important account notices).
- To detect, prevent, and address fraud, abuse, and security issues.
- To comply with legal obligations.
We do not sell your personal information, and we do not use your content to train AI models or to build advertising profiles.
4. Service providers we rely on
We use a small number of trusted infrastructure providers (sub- processors) to run the Service. They process data only to provide their service to us:
| Provider | Purpose |
|---|---|
| Neon | Database hosting and authentication |
| Stripe | Subscription billing and payments |
| Cloudflare R2 | File and attachment storage |
5. How we protect your data
- Vault secrets are encrypted with AES-256-GCM before they are stored; the plaintext is never written to the database.
- With end-to-end encryption turned on, vault secrets are encrypted in your browser with a key derived from your vault passphrase. We never receive that passphrase, your recovery key, or the encryption keys, and we cannot read or recover that content. If you lose both your passphrase and recovery key, it is permanently unrecoverable.
- Every record is scoped to its owner, so you can only read and write your own data.
- Data is encrypted in transit using TLS.
No system is perfectly secure, but we work to protect your information using reasonable technical and organizational measures.
6. Data retention and deletion
We keep your information for as long as your account is active. You can delete your content at any time inside the app. If you want your account and associated data deleted, contact us at hello@deskdump.app and we will delete it, except where we are required to retain certain records (for example, billing records for tax and accounting).
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, email us at hello@deskdump.app. We will not discriminate against you for exercising your rights.
8. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email.
10. Contact us
Questions about this policy or your data? Email hello@deskdump.app. You can also review our Terms of Service.