Privacy Policy

This is Zenithmark's product privacy notice. It sits under Starhold Software's umbrella privacy policy, which applies to everything Starhold operates.

Who we are

Zenithmark is operated by Copper Jerky LLC, an Arizona limited liability company doing business as Starhold Software. Copper Jerky LLC is the data controller for the personal data described here.

What we do with a domain you enter

To produce the report we query public DNS and perform a TLS handshake with your mail and web servers, and we never send email to the domain. There are no accounts and no sign-in.

What we collect and keep

• The domain you scan and its results — the findings, score and the public DNS and certificate data they were based on, stored as a report.
• A hashed IP address — your IP address is stored only as a salted (peppered) SHA-256 hash, together with the domain and the time, to rate-limit scans and prevent abuse. We never store the raw IP address, and the hash cannot be reversed to it.
• No cookies of our own — we set none. If Cloudflare Turnstile is enabled it may set its own.

Report links (/r/<id>) are public to anyone who has them. They are marked so search engines do not index them.

Retention

• Reports are kept for 30 days after the scan, then deleted.
• Scan records with the hashed IP are deleted after 30 days.
• Backups — the database is replicated off-site, so backups are a copy of the live database and hold the same data. A report or scan record that has expired and been deleted from the live database remains in backups until those age out.

To access, correct, or delete your data, email hello@starhold.dev.

Sub-processors

• Backblaze B2 — off-site storage for database backups.
• Cloudflare Turnstile — bot/abuse protection on scan submissions, used once it is switched on. Until then no data goes to it.

We do not sell personal data.

Contact

Copper Jerky LLC, doing business as Starhold Software — hello@starhold.dev.

Last updated: 22 October 2026.