How we collect, use, and protect your data.
Last updated: 15 June 2026
The short version
Free tier: everything stays on your device — we see nothing. Pro tier: we store only your email, hashed password, and encrypted ciphertext we cannot read. We never sell your data or use it for advertising.
ENV Manager Pro is a VS Code extension built by Stackly HQ Ltd ("we", "us", "our"), registered in England and Wales. This Privacy Policy explains what data we collect, how we use it, and the choices you have.
We built this product with a privacy-first philosophy: the default free tier stores everything locally on your machine and sends nothing to our servers.
Free tier (local only)
All environment variable names and values, variable groups, notes, and extension preferences are stored exclusively inside VS Code's local storage on your device. We never receive, process, or have access to this data.
Pro tier — account data
If you create a Stackly HQ account we collect: your email address, a bcrypt hash of your password (never the plain-text password), a Stripe customer ID for billing (Stripe holds your card details — we do not), and your subscription status.
Cloud Sync (opt-in, Pro only)
If you enable Cloud Sync, secret values are encrypted on your device using AES-256-GCM with a key derived from your master password before transmission. We store only the ciphertext. We cannot decrypt your secrets — the key never leaves your device.
Anonymous usage analytics (opt-in)
We may collect aggregate, anonymised usage metrics (e.g. command frequency) to improve the product. This is opt-in, clearly labelled in settings, and contains zero secret names or values. Disable it at any time under Extension Settings → Telemetry.
Support communications
If you contact us by email or via our in-app feedback form, we retain those messages to respond and improve the product. We do not share them with third parties.
We use collected data solely to provide and improve ENV Manager Pro:
We do not sell your data. We do not use your data for advertising or profiling.
We share data with these third-party processors only to the extent necessary to operate the product:
We do not share data with advertisers, data brokers, or any other party.
We retain account data for as long as your account is active. If you delete your account, we permanently delete your account data and any cloud-stored ciphertext within 30 days. Billing records may be retained for up to 7 years to comply with UK financial regulations. Anonymised analytics data contains no personal identifiers and may be retained indefinitely.
We apply reasonable technical and organisational safeguards including:
No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please email security@stacklyhq.com — we will respond within 48 hours.
Under UK GDPR and the Data Protection Act 2018 you have the right to:
To exercise any of these rights, email privacy@stacklyhq.com. We will respond within 30 days.
ENV Manager Pro is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us at privacy@stacklyhq.com and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify registered users by email at least 14 days before material changes take effect. The "Last updated" date at the top of this page always reflects the current version. Continued use of the product after changes constitutes acceptance.
Questions about this Privacy Policy or how we handle your data?