Privacy
Your vault is encrypted on your device with a key derived from your master password and your Secret Key. Neither one is ever sent to the server, so the contents of your vault cannot be read by this service, by its operator, or by anyone who obtains a copy of the database.
What the server stores
- Your email address — it identifies the account and receives new-device confirmation codes.
- A password verifier — the OPAQUE record that lets the server check your password without ever learning it.
- Your vault, as ciphertext — encrypted entries, snapshots, and attachments, plus your vault key wrapped under your own keys and the Argon2 parameters needed to derive them again on a new device.
- Device records — a device identifier, the browser name you sign in from, and when it was first and last seen. Confirmation codes are stored hashed, as are session tokens.
- Sharing envelopes, if you share an item — sealed to the recipient's public keys and unreadable to the server.
What it never stores
Your master password, your Secret Key, and the plaintext of anything in your vault. These stay on your device. The consequence is worth stating plainly: if you lose both your master password and your Secret Key, no one — including the operator — can recover your vault.
IP addresses
Sign-in attempts are counted per address to make guessing attacks expensive. These counters live in memory, expire with their time window, and are never written to disk or associated with vault contents.
Third parties
There is no analytics, no advertising, and no third-party script on this site. Fonts are served from this domain rather than fetched from anyone else. Nothing is sold or shared. If mail delivery is configured, an email provider handles confirmation codes and sees your email address; nothing else is disclosed to it.
Deleting your data
Settings → Danger zone deletes the account yourself, immediately: the row in every table above goes with it — the op log, snapshots, attachments, shares, aliases, devices, sessions and payment records. It cannot be undone, and nothing restores it. The server only ever held ciphertext it could not read, so no backup brings a deleted vault back. Export first if you want to keep it. Ask vault@amsoftbd.tech for anything this page does not answer.