CurbPlace privacy policy

CurbPlace is an encrypted notebook, snippet keeper, password vault, and developer toolkit. It runs in your browser and encrypts notes and saved credentials before storing or syncing them.

CurbSoftware is the controller for this product and the CurbApps account. Questions: curbapps.com/contact.

Local-first by default

Your data lives in a local database inside the extension. Sensitive fields are encrypted with a device or account key, and connected sync encrypts product data before upload. Using CurbPlace without a CurbApps account sends no product data anywhere.

What CurbPlace does

• Storage, notifications, downloads, and alarms: local data, confirmations, the exports you request, and sync timing.
• Some developer tools fetch a page or API you point them at. That permission is requested only when you enable the tool, and the request goes straight from your browser to the target.
• Optional premium sharing: a note can be shared with a link. The note content is encrypted before it reaches us; the server relays ciphertext it cannot read.
• Note attachments (premium) upload to Cloudflare R2 as encrypted blobs.
• Saved logins use the same account key as CurbPage, web, and mobile. Your master password never leaves the device.
• Connected sync (premium) uploads notes, groups, revisions, tool configs, and vault entries as encrypted envelopes our servers cannot read.

If you use a CurbApps account

An account is optional. Creating one at curbapps.com collects your email and authentication data (processed by Supabase) and, if you pay, billing data (processed by Stripe). CurbSoftware never receives your card details.

Connected sync is zero knowledge. Before anything leaves the device it is encrypted with an account encryption key wrapped by a key derived from your master password. Our servers store ciphertext envelopes they cannot read. There is no password reset: if you forget a master password set on a vault, the data cannot be recovered.

Third-party requests

Any outbound requests this product makes are listed in the "What CurbPlace does" section above. We do not embed analytics, ad trackers, or fingerprinting scripts.

Changes

If this policy changes, the date above changes with it. Material changes are announced in the product before they take effect.