Privacy Policy

This is Umbermark's product privacy notice. It sits under Starhold Software's umbrella privacy policy, which applies to everything Starhold operates.

Who we are

Umbermark is operated by Copper Jerky LLC, an Arizona limited liability company doing business as Starhold Software. Copper Jerky LLC is the data controller for the personal data described here.

What we collect

• Email address — when you sign in with a Starhold Account (Google sign-in), the account's email address is used to identify you here.
• Scan reports — the findings and score for a scan. Public share links at /r/<id> are scrubbed: the target host/IP is redacted and sensitive evidence is masked. A report link is long and random, search engines are told not to index it, and it is shareable by design: anyone who has the link can read the report.
• Abuse-prevention records — your IP address and the target you scan are stored only as keyed (peppered) SHA-256 hashes, used for rate limiting. A hashed IP is still treated as personal data. Each record also keeps the time and, for a managed scan, a fingerprint of the SSH key used (never the key itself). We do not record your browser's user-agent string.
• Usage counts — page and button events are counted per day (for example, “page view: 120”). The counts carry no identifier: no user, session, IP address or user agent.

We use no third-party trackers, analytics or advertising cookies, and we do not sell personal data.

How SSH keys are handled

For the one-off managed (“we connect”) option, the read-only SSH key you paste is passed to the scan worker in memory, spilled to a private owner-only temporary file only for the moment the connection is established, and deleted immediately afterwards. That key is never written to our database, logs, or backups.

If you are signed in and save a server for repeat or scheduled scans, the key is stored so those scans can run: encrypted (XSalsa20-Poly1305) with a per-user key derived from a secret that is not kept in the database. It is decrypted only when one of your scans runs.

Retention

Every period below starts at the moment stated, and a scheduled job physically deletes expired data.

• Free scan reports (anonymous, outside-in and uploaded) are kept 30 days from the scan, or until you delete them with the delete key shown after the scan. After that the link stops working and the stored report is deleted.
• $5 reports are kept 3 months from payment, or until you delete them with your ownership key, whichever comes first. The ownership key is shown once, is stored only as a one-way fingerprint, and stops working when the report is deleted, claimed into a Starhold Account, or expired.
• Abuse-prevention records are kept 1 year from the record, then deleted.
• Usage counts are kept 90 days from the day they were counted, then deleted.
• Sign-in sessions expire after 30 days, or when you sign out.
• Saved servers are kept until you delete them; a deleted server is removed by the scheduled job.
• Branding and client links (Agency): the name, colour and logo you upload are kept until you change them or delete your account. A client link shows anyone who has it the server's latest scan, scrubbed like a share link; it works until you revoke it or delete the server or your account.
• Accepted risks (the reason and expiry you record for a finding on a saved server) are kept until you remove them or delete the server or your account. After the expiry they stop changing your score but stay listed until you remove them.

Deleting your data. What you delete is removed from live systems immediately, from backups within 30 days, and only a bare purchase record is kept as tax law requires (amount, date and payment-provider reference, no report content, for up to 7 years).

To access, correct, or delete your data: Use the contact form at starhold.dev/contact or write to hello@starhold.dev.

Sub-processors

Umbermark uses the services below and shares with each only the minimum it needs.

• Polar.sh — takes your payment as the merchant of record and keeps its own records. We keep only the order id.
• OVH — hosting (United States).
• Cloudflare R2 — off-site database backups.

Alert destinations you add. If you add a webhook, Slack or Discord alert channel, each score-drop alert sends that destination the saved server's name, the old and new score and a link to the report (opening it needs your sign-in). That service then handles the message under its own terms. The channel URL is stored encrypted until you remove the channel or delete your account.

We do not sell personal data.

Contact

Copper Jerky LLC, doing business as Starhold Software. Use the contact form at starhold.dev/contact or write to hello@starhold.dev.

Last updated: 24 October 2026.