Security.

1Where it runs

• ServersGalena's servers are run by OVH Hosting, Inc., in Canada. The address lookup, the data files and the app all run there.
• Your dataThe files you upload to the app stay on these servers in Canada. So do the app's backups today. From November 20, 2026, a sealed copy of each backup will also be kept off these servers, and that store may be outside Canada.
• These pagesThe pages at craftpine.com/galena are served by Vercel, as the website privacy page describes.
• Map searchWhen an address is not in the records Galena holds, the lookup asks OpenStreetMap's Nominatim service where it is. Nominatim gets the address text from our server, not your internet address.

2What is kept, and what is not

• AddressesGalena does not log or keep the addresses you type. While the lookup runs, it keeps recent searches in memory to answer faster, and a restart clears them.
• Access logsWe keep no access logs of lookup requests.
• Workspace filesFiles you upload to a free workspace are stored encrypted, with a key for each workspace. The lines read from them are kept in the app's database, which is not encrypted. 7 days after the workspace starts, we delete its files, lines, models, results and its key.
• BackupsThe app's database is backed up every day. Each backup is encrypted, and the key that opens it is not kept on the server.
• Browser toolsThe Sample Designer, the Inventory Checker and Map your own city read your file in your browser. It is not sent to us.
• TrackingGalena has no advertising and no tracking, and it sets no cookies.

3Keys and access

• Workspace keysA free workspace key is shown once and cannot be recovered. It never carries admin rights.
• Other sitesA free workspace cannot be started from another site's page.

4Report a problem

If you find a security problem, write to hello@craftpine.com. Please use made-up data in what you send: no real addresses, customer records or working keys.

The privacy note has the rest of what Galena does with information.