Privacy
Effective October 1, 2026
The short version: the Stowit app runs on your computer and sends us nothing. If you pay for the Attic, we hold an encrypted copy of your files that we cannot read, plus the few details Stripe needs to bill you. We do not sell data, and we do not use it for advertising.
Who we are
Stowit is run by Stowit.dev ("we"). Questions about this policy go to todd@stowit.dev.
The app on your computer
The stowit command-line app scans, compresses and moves files on
your own machine and your own drives. It does not send your files, their names, or
any scan results to us. It has no telemetry. It only talks to the internet when you
use the Attic, or storage you set up yourself.
When stowit proof opens stowit.dev to show your result, the numbers
travel in the part of the web address after the #. Your browser never
sends that part to our server, and our analytics are set up so they cannot record it
either.
The website
stowit.dev uses Plausible Analytics to count visits. Plausible uses no cookies and collects no personal data. It records things like the page, the referring site, the country and the browser type, and a handful of button clicks, such as copying the install command. You can switch it off in any browser by visiting stowit.dev/#ignore.
The site is hosted by Render, which keeps standard server logs (such as IP address and time of request) for security and running the service.
The Attic (paid storage)
Your files. The app encrypts each file on your computer before uploading it, with a key that is created on your machine and never leaves it. We store only that encrypted copy. We cannot open it, read it, or hand a readable copy to anyone, because we do not have the key. If you lose your key, we cannot recover your files.
What we keep about your account:
- your Stripe customer ID, subscription status and plan;
- a one-way hash of your join token (never the token itself);
- the name of the computer that joined, if your app sends one;
- a running and a daily measurement of how much you store, which we use to keep your plan's storage limit and keep for about 13 months;
- the names and sizes of your encrypted objects, which the storage service needs to exist.
Payment. Checkout happens on Stripe's own page. Stripe collects your email address and card details under its privacy policy. We never see or store your card number.
Where it runs. The Attic runs on Cloudflare Workers, and your encrypted files are stored in Cloudflare R2. Cloudflare processes requests, including your IP address, to run that service.
Who else touches your data
- Stripe: payments and invoices.
- Cloudflare: runs the Attic and stores the encrypted files.
- Render: hosts this website.
- Plausible: counts website visits, without cookies.
We share data with these providers only to run the service. We will disclose account details if the law requires it. Even then, we can only hand over encrypted files, which we cannot read.
How long we keep it
We keep account and billing records while your account is open, and afterwards for as long as tax and accounting law requires. We keep daily usage measurements for about 13 months. What happens to stored files after you cancel is set out in the terms.
Your choices
You can download your files, ask what we hold about you, or ask us to delete your account and everything stored under it, at any time, by emailing todd@stowit.dev. Depending on where you live (for example the EU, the UK or California), you may have further rights under your local law, and we will honour them.
Children
Stowit is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes in a way that matters, we will update the date above. If you pay for the Attic, we will also email you before the change takes effect.