Privacy, without the fog.

The short version

CueStash does not need to upload your stash, cues, or archive to operate. The Mac app stores its core content locally. We do not sell personal information, use your captures to train models, or require an account inside the app.

What stays on your Mac

Captured text, prompts, links, notes, item status, search data, and app preferences are stored locally by the CueStash Mac app. The working library is encrypted with a device-only key held in the macOS Keychain; a JSON export is readable only when you explicitly create one. Content leaves your device only when you deliberately copy or send it to another application, or explicitly enable a network integration that explains its behavior before use.

What the website processes

Basic delivery data

Our hosting and security providers may process standard request data such as IP address, browser type, requested URL, timestamps, and security signals to deliver the site, prevent abuse, and troubleshoot reliability. We do not add behavioral advertising trackers to the CueStash website.

Purchases and licenses

Checkout is handled by Stripe. Stripe receives the payment and billing information needed to complete your purchase, calculate tax, prevent fraud, and issue receipts. CueStash receives purchase identifiers, your checkout email, payment status, and enough information to create and support your license. We do not receive or store your full card number.

Launch list

If you join the launch list, we store the email address you submit, the page where you joined, and limited campaign or referring-domain labels. We use that information to send release announcements and understand which launch work is useful. We do not add cross-site behavioral advertising trackers. You can unsubscribe from any message.

License activation

When you activate CueStash, the licensing service receives your license key, a one-way device identifier, the app version, and activation timestamps. This lets us enforce the three-Mac license limit, restore access, and revoke licenses associated with refunded or fraudulent purchases. The device identifier is not intended to reveal your files, captures, Apple ID, or hardware serial number.

Support

If you email support, we process your email address and the message or files you choose to send so we can answer. Do not send private captures unless they are necessary to diagnose the issue and you intend for us to inspect them.

Service providers

We use a small number of providers for defined purposes:

• Cloudflare for website delivery, security, commerce APIs, and license records.
• Stripe for checkout, payments, tax calculation, fraud prevention, and receipts.
• Apple for code signing, notarization, and macOS platform services.

Their processing is governed by their own terms and privacy policies. We do not authorize these providers to use your CueStash captures because the core app does not send those captures to them.

Retention

Local app content remains until you delete it or remove the app's data. Purchase, tax, refund, and license records are retained as needed to deliver your license, meet accounting and legal obligations, resolve disputes, and prevent fraud. Launch-list records remain until you unsubscribe or request deletion. Support correspondence is retained only as long as it remains useful for those purposes.

Your choices

You may:

• delete content from the Mac app and access its readable local library;
• uninstall CueStash and remove its local data;
• decline optional network integrations;
• request access to or deletion of support and license data, subject to records we must retain;
• request a qualifying refund under our refund policy.

Security

The customer download will be enabled only after it is signed and notarized for macOS. Website and commerce traffic use HTTPS. We restrict service access and avoid collecting content the service does not need. We will investigate and communicate material incidents affecting customer data.

Children

CueStash is a professional productivity tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes

If this policy changes materially, we will update the date above and publish the revised policy here. A change in product architecture that sends captured content off-device will require prominent notice and an explicit user choice.

Contact

Privacy questions and requests can be sent to privacy@cuestash.com.