Privacy Policy

Last updated: August 4, 2026

TokStash is built so that we could not read your data even if we wanted to. This policy describes what the app and this website do — and, mostly, what they don't.

What the app collects

Nothing. TokStash has no accounts, no analytics, no telemetry, and no advertising identifiers. The app does not transmit the tokens or passwords it generates — or anything else — off your Mac.

Where your data lives

• Tokens you choose to stash are stored in a single file on your Mac, encrypted with AES-GCM (256-bit).
• The encryption key is stored in the macOS Keychain on your device and never leaves it.
• Preferences (like your default token length) are stored locally in macOS user defaults.
• Nothing is synced to us or to any third party by the app.

Purchases

The optional lifetime unlock is processed entirely by Apple through the Mac App Store. We never see your payment details. Apple provides us with anonymized, aggregate sales reporting only. Apple's handling of your purchase is governed by Apple's Privacy Policy.

This website

tokstash.com is a static informational site hosted on Vercel. It sets no cookies and runs no analytics scripts. Vercel, as our hosting provider, may process standard server logs (such as IP addresses) to deliver the site and protect it from abuse.

The direct-download version

The version of TokStash distributed from this website (not the Mac App Store version) periodically checks tokstash.com for a newer release. That request contains no personal data or identifiers — it simply fetches a version manifest. The Mac App Store version makes no network requests at all.

Children

TokStash is a developer utility and is not directed at children under 13. We do not knowingly collect information from anyone, children included.

Changes

If this policy changes, the updated version will be posted here with a new "last updated" date.

Contact

Type Visions · support@tokstash.com