Privacy Policy
Last updated: March 2026
1. Introduction
Plumbug Studio Inc. (“we”, “our”, or “us”) operates typeblast, a macOS text expansion application and the website at typebla.st. This Privacy Policy explains how we collect, use, and protect information about you when you use our services.
By using typeblast, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your email address and a securely hashed password. This is managed through our authentication provider, Authon. We do not store plain-text passwords.
2.2 Snippet Data
If you use cloud sync, your text expansion snippets (abbreviations and their expansions) are stored on our servers to enable sync across your devices and to power community snippet groups. Snippets you mark as private remain private. Snippets you publish to a community group are visible to other users.
2.3 Usage Analytics
We collect anonymised analytics data through OpenPanel to understand how typeblast is used — for example, which features are most popular and how users navigate the website. This data does not identify you personally and cannot be linked back to your account.
Collected analytics data includes:
- Pages visited and time on page
- General geographic region (country-level only)
- Browser and operating system type
- Referral source
2.4 Payment Information
Subscription payments are processed by Paddle, our Merchant of Record. We do not receive or store your full payment card details. Paddle handles all billing data in accordance with PCI-DSS standards. We receive transaction metadata (subscription status, plan type, renewal dates) from Paddle to manage your account access.
2.5 Technical Data
When you interact with our website or API, we may collect your IP address, browser type, and device identifiers for security, fraud prevention, and debugging purposes. This data is not used for advertising.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the typeblast service
- Authenticate your identity and protect your account
- Sync your snippets across devices
- Process subscription payments and manage your billing
- Send transactional emails (e.g., account confirmation, password reset)
- Respond to support requests
- Understand how our service is used and improve user experience
- Detect and prevent fraud or abuse
We do not sell your personal data to third parties. We do not use your data for targeted advertising.
4. Third-Party Services
typeblast integrates with the following third-party services. Each operates under its own privacy policy.
| Service | Purpose | Data shared |
|---|---|---|
| Paddle | Subscription billing & payments | Email, billing address, payment details |
| Authon | Authentication & account management | Email, hashed password, auth tokens |
| OpenPanel | Product analytics | Anonymised usage data, IP (anonymised) |
5. Cookies and Local Storage
We use the following storage mechanisms:
- Authentication tokens — stored in localStorage to keep you signed in across sessions
- Theme preference — stored in localStorage to remember your light/dark mode choice
- Session cookies — short-lived cookies used by our authentication system to manage sessions securely
- Analytics cookies — first-party cookies set by OpenPanel to distinguish unique visitors anonymously
We do not use third-party advertising cookies. You can clear cookies and localStorage at any time through your browser settings, though this will sign you out.
6. Data Retention
We retain your account data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete your personal data and snippets within 30 days, except where retention is required by law (e.g., financial records may be retained for up to 7 years per applicable tax law).
Anonymised analytics data may be retained indefinitely as it cannot be linked to an individual.
7. Data Security
We implement industry-standard security measures including TLS encryption in transit, encryption at rest for sensitive data, and access controls that limit who within Plumbug Studio Inc. can access user data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your account and associated data
- Portability — request an export of your snippet data in a machine-readable format
- Objection — object to specific processing of your data
You can delete your account and export your data directly from your account dashboard. For other requests, contact us at privacy@typebla.st.
9. Children's Privacy
typeblast is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
10. International Transfers
Our servers and service providers may be located outside your country of residence. By using typeblast, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your own.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. The date at the top of this page reflects when this policy was last revised. Continued use of typeblast after changes take effect constitutes acceptance of the updated policy.
12. Contact
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:
Plumbug Studio Inc.
privacy@typebla.st