Privacy Policy
Last updated October 8, 2026
The short version
- Your spreadsheets and key files are processed in your browser. They are never uploaded to us.
- If you use Pro, your license key goes to our server to be checked. That is all.
- We have no accounts, no ads and no tracking cookies.
- Payments are handled by Lemon Squeezy, not by us.
The full text below is what counts.
1. Who we are
Maskly is run by HEVYF LLC (“we”, “us”). You can reach us at support@maskly.app. This policy explains what happens to information when you use Maskly. Our Terms of Use also apply.
2. What stays in your browser
When you mask or restore a file, everything happens inside your browser tab on your own device. That covers the spreadsheet, the values in it, the key file, any pasted text, the passphrase and the results. None of it is sent to us or to anyone else, and we cannot see it. Files you download are saved on your device only.
Because your files never reach us, we do not collect or process the personal data inside them. You can check this yourself: open your browser’s network tab, mask a file, and watch that nothing is sent.
3. What we do receive
- License checks (Pro only). When you unlock Pro, and about once a day after that, your browser sends your license key and a random browser id to our server. Our server passes them to Lemon Squeezy to check them, together with a label such as “Chrome on macOS” so that a license shared too widely can be spotted. The request to Lemon Squeezy comes from our server, so it does not carry your IP address. We do not keep a database of keys or users.
- Server logs. Our host, Vercel, records standard details about each visit, such as IP address, browser type, pages requested and time. We use them to run and protect the site. When someone is turned away because a key is on too many browsers, we log only the last four characters of the key.
- Messages to us. If you email us, we get your address and what you write, and we use it to reply.
4. Payments
Lemon Squeezy is our merchant of record and takes your payment. It collects what it needs for that, such as your name, email, billing address and payment details, and sends you the receipt and license key. We do not see your full card details. We can see order information such as your name, email, country and order number in our Lemon Squeezy account, and we use it for support and to deal with problems with an order. Lemon Squeezy’s own privacy policy covers what it does with your information.
5. Stored in your browser
After you unlock Pro, Maskly saves your license key, the random browser id and the time of the last check in your browser’s local storage, so that Pro stays on when you come back. It stays on your device. Clearing your site data removes it. We do not use advertising cookies or tracking cookies, and we do not run analytics on this site.
6. How we use information
- To check licenses and give you Pro.
- To run, secure and fix the site, and to stop abuse.
- To answer your emails and handle order problems.
- To meet legal duties.
Where laws such as the GDPR apply, our reasons are: to carry out our contract with you (Pro), our legitimate interest in running and protecting the site, and legal obligations. We do not sell personal information, and we do not use it for advertising.
7. Who else handles it
- Vercel hosts the site and its server.
- Lemon Squeezy takes payments and checks license keys.
- Authorities or advisers, if the law requires it or we need to protect our rights. We share only what is needed.
These providers may process information in the United States and other countries.
8. How long we keep it
License checks are not stored by us beyond ordinary server logs, which our host keeps for a limited time. Emails to us are kept as long as we need them to help you and to keep records. Lemon Squeezy keeps order records for as long as the law requires.
9. Your rights
Depending on where you live, you may have the right to ask for a copy of your information, to correct or delete it, to object to how it is used, and to complain to your data protection authority. Write to support@maskly.app and we will answer within a reasonable time. For payment details, you may also need to contact Lemon Squeezy. We cannot look up or delete anything from your files or key files, because we never have them.
10. Keeping things safe
The site uses HTTPS. No system is perfectly secure, so we cannot promise it. The most sensitive thing is your key file, because it holds your real data. It never reaches us, so keep it safe yourself, away from the masked file, and consider locking it with a passphrase. If you forget the passphrase or lose the file, nobody can recover it.
11. Children
Maskly is not meant for people under 18, and we do not knowingly collect information from them.
12. Changes to this policy
We may update this policy. The new version applies once it is posted here with a new “last updated” date. Please look at it from time to time.