Privacy Policy

Last updated 19 August 2026

Secrets and Stuff is operated by Izac Peterson LLC. This policy explains what we collect when you use the service, why we use it, and the limited circumstances in which it is shared.

Information we collect

• Account information. When you sign in with Google, we receive and store the name, email address, and provider account identifiers needed to create and secure your account.
• Vault and sharing information. We store encrypted item contents, encrypted share-link contents, item names and sharing settings, version records, team and organization membership, and audit records. Vault item contents are encrypted before storage; item names and access metadata are not encrypted because the application needs them to organize and authorize the service.
• Technical and security information. We and our hosting providers may process IP addresses, browser and device information, request logs, and security events to operate, secure, rate-limit, and investigate misuse of the service.
• Billing information. Stripe processes card payments. We receive billing identifiers, subscription status, and limited transaction information, but do not receive or store full payment-card numbers.

How we use information

We use information to provide the service; authenticate users; encrypt, store, and share items as you direct; maintain the audit trail; process subscriptions; prevent abuse; respond to support requests; and comply with applicable law. We do not sell personal information or use your vault contents to advertise to you or to train AI models.

When information is shared

We share information only as needed to run the service, when you instruct us to share it, or when law requires it. Our current service providers include:

• Netlify, which hosts the application and its server functions.
• Neon, which stores the application database.
• Google, which provides sign-in.
• Stripe, which processes subscription payments.

If you add a teammate, choose an item sharing scope, or send a share link, the people you authorize may receive the information needed to access that item. Share links use a separate browser-encryption design described on our Security page.

Retention and deletion

We keep account and service information while your account or organization remains active. Deleting an item removes it and its stored versions. Deleting an organization removes its items, teams, invitations, audit trail, and share links. Service-provider backups may retain a limited copy for their normal backup period.

Account deletion is not yet self-service. To request account deletion or ask a question about your data, email [email protected]. We may retain information where necessary for legal, security, accounting, or fraud-prevention purposes.

Security

We use administrative and technical measures designed to protect information, but no system is perfectly secure. Our Security page describes the encryption model, access controls, service providers, and current limitations in more detail.

Children

Secrets and Stuff is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will address the request.

Changes and contact

We may update this policy when the service or our practices change. We will post the updated version here and revise the date above. Questions about this policy can be sent to [email protected].