Last updated:
SaltMark is developed and operated by Vitali Rijenco. This page covers SaltMark Store, distributed through the Mac App Store, and the shared website and contact services described below.
SaltMark Direct, distributed outside the Mac App Store, has a separate Direct privacy notice. Direct license keys, checkout and recovery are not the Store edition's purchase system. Reading this policy does not require accepting Direct purchase terms.
Application data
SaltMark stores bookmarks in an encrypted vault file on your Mac. Preferences and information needed to reopen recent vaults are stored locally. The app does not send vault contents, passwords or derived unlock secrets to SaltMark. It contains no advertising or tracking analytics and no built-in service for uploading usage activity, diagnostics or device identifiers to SaltMark. SaltMark has no remote access to your vault.
If enabled, Touch ID protects a derived unlock secret in the macOS Keychain; your vault password is not stored there. Supported YubiKey challenge-response operations take place locally. The app writes limited security diagnostics to the Mac's system log; it does not upload those logs itself.
Separately, macOS can send analytics and crash information to Apple according to your system sharing settings. Apple may share relevant reports with app developers if you enable that option. See Apple's Mac analytics controls.
Opening a bookmark passes its URL to your browser or the associated application, which handles the connection to the destination. Copying a link places it on the system clipboard, outside the encrypted vault.
When you ask the Store edition's Safari extension to save a tab, it passes the tab's URL and title to the local application. The Store extension does not include website icon (favicon) data or fetch website icons when saving a tab. This transfer does not pass through a SaltMark server.
Pending Safari save requests are stored in an encrypted local queue outside the vault, protected by a key in macOS Keychain. The app removes queue entries after handoff and rejects requests older than seven days. Expired files may remain until the extension or app next processes the queue.
Optional backups
Backups are encrypted snapshots, not live synchronization. Automatic backups can also keep encrypted snapshots in local staging while delivery is pending. Folder backups use your chosen location. If you place a vault or backup in a cloud-managed folder, that provider handles its upload and storage. Optional iCloud backups use Apple's iCloud Documents service, associated with your Apple account, under Apple's applicable terms and privacy information. SaltMark does not operate a server that receives these backup files.
Vault files, local settings and user-selected backups remain under your control. SaltMark cannot remotely delete them or recover a lost vault password.
App Store purchases and restoration
Apple handles Signature purchases and restoration through StoreKit. The app receives product and transaction identifiers, entitlement status, purchased or family-shared status and revocation status to offer and apply Signature. This entitlement check does not send those records to the Direct license service or create an email-to-key record there.
SaltMark does not receive your full card number or card security code through StoreKit. Apple's processing is described in its App Store privacy information. Use Restore Purchases inside the Store edition for restoration. Apple handles App Store refund requests. Contact SaltMark for application faults or other matters listed below.
Website hosting and security
The main website at saltmark.xyz uses Cloudflare Workers Static Assets. Cloudflare processes IP addresses and request information, such as requested paths, request times, browser information and response status, to deliver pages, diagnose faults and protect the service. These website requests are separate from the native application's local vault processing.
SaltMark does not use advertising trackers or analytics scripts on the main website. Its own page code sets no cookies or persistent browser storage. The interactive bookmark preview keeps demonstration text in temporary browser memory and does not submit it to SaltMark. Refreshing or closing the page clears that text. External links open services with their own policies.
Cloudflare may use security cookies when protection features require them, for example to remember a completed security challenge. Their use depends on the request and enabled protection. See Cloudflare's cookie documentation. License-page storage is listed in the Direct privacy notice.
Operational records are used for delivery, security and troubleshooting, not SaltMark advertising or profiling. Cloudflare Workers Logs has a maximum retention of seven days on the paid Workers plan. For our current website zone, Cloudflare documents a 31-day retention period for the Security Events and Security Analytics datasets. These are separate from Worker application logs; see its security-data retention information. These periods do not cover every internal Cloudflare record. Cloudflare's own processing of network and end-user information is described in its Privacy Policy.
Where provider-managed logs or backup history cannot be selectively erased through our controls, we assess the request, seek provider assistance where needed, and explain any lawful retention or remaining limitations. We do not treat deleting active service records as confirmation that every provider copy has been immediately erased.
Contact correspondence
Contact support@saltmark.xyz about SaltMark purchase or refund problems, Signature activation or recovery, application faults, security or privacy concerns, or your personal-data rights. You may also send feedback or feature requests about SaltMark. See the contact page for the appropriate purchase route.
We receive your email address, any included name, message and attachments to handle that correspondence. We do not use it for advertising or profiling. General technical consulting and help with unrelated products are outside this channel. We do not promise an individual reply to every suggestion or implementation of a requested feature. This does not limit mandatory rights.
In support correspondence, do not send vault passwords, verification codes, encryption keys, YubiKey secrets, a full license key or unencrypted sensitive vault contents. We will not ask for those secrets in email. An order reference is normally sufficient to identify a purchase issue.
Correspondence is hosted by Proton Mail, operated by Proton AG. We retain it while active and for up to 30 days after resolution or our last substantive reply, whichever is later, unless applicable law requires longer retention. Copies in provider backups can remain temporarily after active-mailbox deletion. Proton states that its encrypted offline backups are kept for up to 30 days. See its Mail Privacy Policy.
Providers and international processing
We share information with the providers needed for the services described here and where necessary to comply with law. SaltMark does not sell personal information. SaltMark remains responsible for the processing it controls, including when a provider processes information on its behalf. A provider's terms or privacy notice do not displace our responsibilities or your rights under applicable data-protection law. A provider's independent processing is governed by its own notice and applicable law.
Providers may process information outside your country. Cloudflare operates internationally, including in the United States; its Data Processing Addendum sets out contractual safeguards, including standard contractual clauses for relevant restricted transfers. Proton reports that its Mail servers are in Switzerland, Germany or Norway. Apple's own service processing is explained in its privacy information. These services do not imply that all information stays on your device or within one country.
To request information about the safeguards relevant to SaltMark's processing of your data, contact support@saltmark.xyz.
Purposes and personal-data rights
Where a lawful basis is required, requested services and contractual support rely on performance of the relevant contract. Proportionate service security, troubleshooting and responding to product enquiries rely on legitimate interests. Record keeping required by law relies on the applicable legal obligation. A contract with a service provider is not, by itself, a statutory record-keeping obligation or a separate lawful basis for retaining personal data. Where an optional activity requires consent, that consent must be obtained separately; reading this notice is not consent to unrelated processing.
Depending on applicable law, you may request access, correction, erasure, restriction or portability, object to relevant processing, withdraw consent where processing relies on it, and complain to a competent data-protection authority. To exercise these rights or report a concern about SaltMark's processing of your data, contact support@saltmark.xyz.
We handle personal-data requests without undue delay and within the deadlines required by applicable law. If a legally permitted extension is needed, we will notify you within the applicable deadline and explain the reason. We may request proportionate information to verify your identity. If information must be retained or a request cannot be fulfilled, we explain the reason and applicable complaint options.
Children and changes
SaltMark is a general-purpose productivity product and is not directed to children. We update this notice when relevant practices change. Where the Store application's data practices change, we also reassess its App Privacy disclosures. Changes to a Direct service do not by themselves mean that the Store application has adopted that service.