Privacy Policy

This is Umbermark's product privacy notice. It sits under Starhold Software's umbrella privacy policy, which applies to everything Starhold operates.

Who we are

Umbermark is operated by Copper Jerky LLC, an Arizona limited liability company doing business as Starhold Software. Copper Jerky LLC is the data controller for the personal data described here.

What we collect

• Email address — only if you sign in; used for the magic-link login and account-related mail. No passwords.
• Scan reports — the findings and score for a scan. Public share links at /r/<id> are scrubbed: the target host/IP is redacted and sensitive evidence is masked.
• Abuse-prevention records — your IP address and the target you scan are stored only as salted (peppered) SHA-256 hashes for rate limiting, never in the clear and not reversible back to the original. Each record also keeps the time, your browser's user-agent string and, for a managed scan, the fingerprint of the SSH key used (never the key itself).
• Usage events — funnel events (page view, scan completed, purchase click) to understand how the product is used. If you are signed in, an event is linked to your account. If your browser holds a sign-in session, the event also carries a one-way hash of that session, used only to count distinct visitors; the hash cannot be reversed or used to sign in; we store the hash, never the cookie itself. Otherwise it carries no identifier.

How SSH keys are handled

For the one-off managed (“we connect”) option, the read-only SSH key you paste is passed to the scan worker in memory, spilled to a private owner-only temporary file only for the moment the connection is established, and deleted immediately afterwards. That key is never written to our database, logs, or backups.

If you are signed in and save a server for repeat or scheduled scans, the key is stored so those scans can run: encrypted (XSalsa20-Poly1305) with a per-user key derived from a secret that is not kept in the database. It is decrypted only when one of your scans runs.

Retention

• Sign-in links stop working after 15 minutes.
• Sign-in sessions expire after 30 days, or when you sign out.
• Anonymous and outside-in scan reports — the share link stops working after 30 days unless you attach the report to an account or make it permanent. The stored report is not deleted automatically when its link expires; it is kept until you ask us to delete it.
• Account data, account reports and saved servers are kept until you ask us to delete them. Removing a saved server from your dashboard stops it being used; ask us if you also want its stored record erased.
• Abuse-prevention records are kept as long as needed to prevent abuse; there is currently no fixed expiry.
• Usage events have no fixed expiry; we delete any that are linked to your account on request.
• Backups, once off-site backups are switched on, are a copy of the live database and hold the same data.

To access, correct, or delete your data, email hello@starhold.dev.

Sub-processors

Umbermark is built to use the services below, and shares with each only the minimum it needs. Umbermark is pre-launch: a service is used only once it has been switched on, and until then no data goes to it.

• Postmark — sends login and notification email.
• Polar.sh — billing and payment (merchant of record).
• Cloudflare Turnstile — bot/abuse protection on scan submissions.
• Backblaze B2 — off-site database backups.

We do not sell personal data.

Contact

Copper Jerky LLC, doing business as Starhold Software — hello@starhold.dev.

Last updated: 10 October 2026.