Privacy policy
Last updated: July 19, 2026
Short version: uistash is local-first, this site has no analytics, and we store almost nothing about you. Here is the complete list.
This website
uistash.ai has no analytics, no trackers, no ads, and sets no cookies. It's static pages served by Cloudflare, which processes visitor IP addresses as any host does to deliver the site and absorb abuse.
If you join the waitlist
We store exactly one thing: your email address, in our own database (Cloudflare KV) — no third-party mailing-list vendor. We use it to tell you about uistash and nothing else, and we never share or sell it. Want out? Email hello@uistash.ai and it's deleted.
If you buy a license
The checkout is run by Paddle, our merchant of record. Paddle collects your payment details — we never see your card number — and handles invoices and sales tax under Paddle's privacy policy.
On our side, the license service keeps one small record per purchase:
- your email address and Paddle transaction ID,
- your license key,
- for each activated Mac: its name (as your Mac reports it, e.g. "Rafael's MacBook Pro") and an anonymous hashed machine identifier — a one-way fingerprint that can't be turned back into anything about your computer.
That's the entire record. It exists so your key works, your 3 machine slots are honored, and refunds can be matched to purchases.
The app
uistash runs on your Mac and your references stay on your disk. The app contacts our license server only to activate, deactivate, or occasionally revalidate your key (sending the key and the hashed machine identifier — nothing else). There is no telemetry: no usage tracking, no crash reporting, no phoning home about what you stash. Being offline never blocks the app.
When you import a design, the app calls the AI engine you connected with your own API key — that request goes directly from your machine to your provider under their privacy terms; it never passes through our servers.
Mail to hello@uistash.ai is routed by Cloudflare Email Routing to a private inbox. Your messages are read by one person (Rafael) and used only to help you.
Your rights
Ask hello@uistash.ai for a copy of what we hold about you (it's the small record above) or for its deletion. We answer within a few days, and Brazilian law (LGPD) backs you up on all of it. Note that deleting a license record deactivates the license.
Changes
If this policy changes, the date above changes with it. We will never quietly add tracking and call it an update.