Privacy Policy

This is Umbermark's product privacy notice. It sits under Starhold Software's umbrella privacy policy, which applies to everything Starhold operates.

Who we are

Umbermark is operated by Copper Jerky LLC, an Arizona limited liability company doing business as Starhold Software. Copper Jerky LLC is the data controller for the personal data described here.

What we collect

• Email address — when you sign in with a Starhold Account (Google sign-in), the account's email address is used to identify you here.
• Scan reports — the findings and score for a scan. Public share links at /r/<id> are scrubbed: the target host/IP is redacted and sensitive evidence is masked. A report link is long and random, search engines are told not to index it, and it is shareable by design: anyone who has the link can read the report.
• Abuse-prevention records — your IP address and the target you scan are stored only as keyed (peppered) SHA-256 hashes, used for rate limiting. A hashed IP is still treated as personal data. Each record also keeps the time and, for a managed scan, a fingerprint of the SSH key used (never the key itself). We do not record your browser's user-agent string.
• Usage counts — page and button events are counted per day (for example, “page view: 120”). The counts carry no identifier: no user, session, IP address or user agent.

We use no third-party trackers, analytics or advertising cookies, and we do not sell personal data.

How SSH keys are handled

For the one-off managed (“we connect”) option, the read-only SSH key you paste is passed to the scan worker in memory, spilled to a private owner-only temporary file only for the moment the connection is established, and deleted immediately afterwards. That key is never written to our database, logs, or backups.

If you are signed in and save a server for repeat or scheduled scans, the key is stored so those scans can run: encrypted (XSalsa20-Poly1305) with a per-user key derived from a secret that is not kept in the database. It is decrypted only when one of your scans runs.

Retention

Every period below starts at the moment stated, and a scheduled job physically deletes expired data.

• Free scan reports (anonymous, outside-in and uploaded) are kept 30 days from the scan, or until you delete them with the delete key shown after the scan. After that the link stops working and the stored report is deleted.
• $5 reports are kept 3 months from payment, or until you delete them with your ownership key, whichever comes first. The ownership key is shown once, is stored only as a one-way fingerprint, and stops working when the report is deleted, claimed into a Starhold Account, or expired.
• Abuse-prevention records are kept 1 year from the record, then deleted.
• Usage counts are kept 90 days from the day they were counted, then deleted.
• Sign-in sessions expire after 30 days, or when you sign out.
• Saved servers are kept until you delete them; a deleted server is removed by the scheduled job.

Deleting your data. What you delete is removed from live systems immediately, from backups within 30 days, and only a bare purchase record is kept as tax law requires (amount, date and payment-provider reference, no report content, for up to 7 years).

To access, correct, or delete your data: Use the contact form at starhold.dev/contact or write to hello@starhold.dev.

Sub-processors

Umbermark uses the services below and shares with each only the minimum it needs.

• Polar.sh — takes your payment as the merchant of record and keeps its own records. We keep only the order id.
• OVH — hosting (United States).
• Backblaze B2 — off-site database backups (United States).

We do not sell personal data.

Contact

Copper Jerky LLC, doing business as Starhold Software. Use the contact form at starhold.dev/contact or write to hello@starhold.dev.

Last updated: 24 October 2026.