Privacy Policy

What we cannot see

Your vault passphrase, your keys, and everything inside your vault: secrets, their labels, notes, tags, file names and contents. These are encrypted on your device before they reach us, and we don't have the keys.

Files you encrypt with the file tool never leave your browser.

What we store

• Your account: email address, sign-in method, when you joined, your plan.
• Your vault in encrypted form: the encrypted items, their size, when they changed, and your public keys.
• Your devices: a generic name like “Chrome on Windows”, when each was first and last used, and the internet address and country it last opened your vault from (shown to you in Settings > Devices). The country is looked up on our own server in a database by [DB-IP](https://db-ip.com) (IP Geolocation by DB-IP, CC BY 4.0); your address is not sent to anyone. A computer name the desktop app shows there is encrypted on your device like your vault.
• Your inbox messages (security alerts and messages from us), kept 30 days.
• Feedback you send us, with your email.
• If you turn on email recovery: your recovery email address and a copy of your master key sealed to a key on our server (see below).
• Short-lived counters that protect against abuse (how many changes per minute).

Email recovery (only if you turn it on)

Email recovery is off unless you switch it on. When on, a copy of your master key is sealed to an escrow key whose secret is kept on our server, separate from the database. It is only opened after a recovery request, a confirmation from your recovery email, and a 72-hour wait during which you are told and can cancel.

This means that while it is on, someone who controlled both our database and our server could open your vault, and we could be compelled by law to use it. If that is not acceptable to you, leave it off and keep your Recovery Key safe.

Emails

We email you about your account and its security: sign-in codes, alerts about new devices, passphrase changes and recovery requests, and plan receipts. No newsletters or advertising.

How long we keep it

• Your account and vault: until you delete your account (Settings > Account). Deletion removes everything at once, on every device; it cannot be undone.
• Deleted items: removed from active use at once; their empty markers are purged after 30 days.
• Inbox messages: 30 days. Free accounts are not deleted for being inactive.

Who else handles it

• Supabase (database and sign-in), which stores the encrypted data above.
• Brevo, which sends our emails.
• Our payment provider (Dodo Payments) for Pro, which handles your payment details; we never see your card.
• Google, if you sign in with Google.

Cookies and local storage

We use only the cookies needed to keep you signed in. Your browser also keeps, on your device only: your theme choice, your device id, your auto-lock choice, and (if you choose “Remember on this device”) your vault key sealed by a key your browser won't let anyone read out. Signing out removes the vault data from the device. No advertising or tracking cookies.

Your choices

You can export or delete your data at any time from the app, or write to support@softwaretrinkets.com for anything else about your data.