Privacy

Last updated October 23, 2026

Your keys stay on your Mac

Burnkeys reads your projects' environment files on your computer. Key values are never sent to us. To check a key, Burnkeys sends it only to that key's own provider (for example, an Anthropic key to Anthropic), the same way your app would use it. New keys you add are stored in your Mac's Keychain.

What we store

• Your account: your email and your plan. Sign-in is handled by Clerk.
• Payments: handled by Stripe. We never see your card number.
• Email alerts (Pro): the provider, variable and project names needed to tell you what happened. Never a key value. Emails are sent by Resend.
• The assistant (Pro): your question, your last few messages, and a list of your providers, variable names, project names, fingerprints and statuses, sent through our server to Anthropic's API to answer you. Never a key value. We don't keep it after answering.
• Breach list: the app downloads the list of reported breaches from burnkeys.com. No account or identifier is sent with that request.
• Email you send to hello@burnkeys.com is forwarded to our inbox so we can answer it.

Where your keys go

A key is sent only to its own provider, to check whether it works, and to Vercel when you ask Burnkeys to update a Vercel project. Nowhere else.

Windows waitlist

If you ask to be notified about Burnkeys for Windows, we keep your email address only to send you one email when it's ready, then delete it. Write to hello@burnkeys.com to be removed sooner.

What we don't do

No selling data, no tracking in the app. This website sets no advertising cookies and loads no trackers. If you arrive from an ad on X (Twitter) and later sign up or buy Pro, our server tells X that an ad led to a sign-up or purchase, using the ad's click id and a one-way hash of your email, so X can't read the address itself. We count downloads by the link that brought you (for example utm_source=google), as a plain number per day: nothing about you is kept.

Your rights

You can ask to see, correct or delete your data at any time: email hello@burnkeys.com. We keep your account data while your account exists and delete it when you delete your account, except payment records we must keep by law. We use your data only to provide Burnkeys (contract) and to meet legal duties.

Who we are

Burnkeys is operated by SSTA Digital Industry Ltd, Limassol, Cyprus, the data controller. Contact: hello@burnkeys.com.