The short version: Veridenti is built so we can't see your data. Your vault is encrypted on your device with a key only you hold. We don't sell data, we don't show ads, and we don't contact any server unless you turn on a feature that needs one. Our only revenue is subscriptions — you're the customer, not the product.
Data we collect, how we use it, where it's stored, and who it's shared with
The table below lists every category of personal or sensitive data Veridenti handles, and — for each — why we use it, where it is stored, and whether it is shared. Fuller detail follows in the numbered sections.
| Data we collect | How we use it (handling) | How & where it's stored | Sharing |
|---|---|---|---|
| Login credentials — usernames, passwords, TOTP/2FA secrets | To autofill and protect your sign-ins on sites you use | Encrypted on your device (AES-256-GCM, key derived from your master password). If you enable sync, also uploaded as an unreadable encrypted blob to our server, which never holds the key. | Not shared. |
| Identity details (personal info) — name, email, phone, postal address, date of birth | To fill sign-up, checkout, and contact forms for you | Same encrypted vault (on device; optional encrypted-blob sync) | Not shared. |
| Financial & estate information — the Legacy Vault (accounts, policies, and related details you choose to enter) | To keep your estate/continuity information in one encrypted place | Same encrypted vault (on device; optional encrypted-blob sync) | Not shared. |
| Notes, bookmarks, private custom values (e.g. rewards/membership numbers), per-site preferences, and learned form-fill data | To fill and organize your logins and forms | Same encrypted vault (on device; optional encrypted-blob sync) | Not shared. |
| Masked-email provider API token | To create masked email aliases through the provider you choose | Encrypted in your vault | Sent only to the email provider you select, directly from your browser — never through Veridenti's servers. |
| Account email address (only if you enable sync) | To authenticate you and associate your encrypted vault with your account; not used for marketing | On our server, alongside a one-way authentication hash and a salt | Not shared. |
| Anonymous usage aggregates (opt-in only, off by default) | To understand feature reliability (see §4) | Aggregated on our server; contains no identifiers, no IP, and no vault contents | Not shared. |
We do not sell or rent your data, show ads, or use any third-party trackers or advertising/analytics SDKs. Retention and deletion are described in section 7.
1. What Veridenti stores, and where
- Your vault (logins, passwords, TOTP secrets, identities, notes, bookmarks, the Legacy Vault, private custom field values such as rewards/membership numbers, and per-site preferences) is stored encrypted on your device (browser local storage), using a 256-bit AES-GCM key derived from your master password via PBKDF2-SHA256 (310,000 iterations). We never receive your master password or the key.
- Settings (theme, thresholds, per-site fill modes, "this is safe" allow-list) are stored locally and, if you enable sync, inside the same encrypted vault blob.
2. Optional cloud sync
If you enable sync, your vault is uploaded as an encrypted blob to our backend (a Cloudflare Worker with KV storage). The server stores only the encrypted blob, a one-way authentication hash, and a salt. The server cannot decrypt your vault — it never has the key. This is zero-knowledge / end-to-end encryption. If you never enable sync, nothing leaves your device.
3. Masked email
Masked email is generated through a provider you choose (Fastmail, addy.io, SimpleLogin, DuckDuckGo, Firefox Relay, or Forward Email) using your own account/API token, stored encrypted in your vault. The request goes directly from your browser to that provider — it never passes through Veridenti's servers. Veridenti does not operate an email service and does not receive your messages.
4. Anonymous usage stats — off by default, opt-in only
Veridenti contacts no analytics server unless you explicitly turn on "Share anonymous usage stats." If you opt in, what we collect is anonymous and aggregate: an active-device count via a token that rotates weekly (not a persistent identifier); coarse country (never city, never a stored IP); and form-fill success rate and which form types get fixed. If you opt in, Veridenti may also report an aggregate count of how many items your vault holds — a single number, never the contents, names, or any value of those items.
What we never collect, even when opted in: your logins, passwords, or vault contents; any value you type; the specific sites you visit or full URLs; your identity; your IP or precise location. There are no third-party trackers, no advertising SDKs, and no analytics cookies anywhere in Veridenti.
4a. Breach monitoring & Leak Radar — matched on your device
Veridenti can warn you when a company you have an account with has been breached, and (with masked email) flag when one of your per-site aliases starts receiving unexpected mail ("Leak Radar"). Both work on your device: we download a public list of recently-breached domains — an ordinary request for public data that contains nothing about you — and compare it against your saved sites locally; the comparison, and your list of accounts, never leave your device. Leak Radar reads only your masked-email activity metadata (such as when an alias last received mail) from your own provider, directly — never the content of any message, and never through Veridenti's servers.
5. Phishing / "Protect" features are 100% local
Veridenti's anti-phishing protection (look-alike-site warnings, password-reuse warnings, form-skimmer detection) runs entirely on your device, comparing pages only against your own saved logins. Your browsing is never sent anywhere for these checks.
6. Permissions
Veridenti requests broad host access (http://*/*, https://*/*) for one reason: a password manager must be able to fill and protect logins on any site you use, and it can't know in advance which sites those are. It does not read or transmit page contents; it looks at form fields locally to fill them and to detect threats.
6a. On mobile (iOS & Android apps)
The Veridenti iOS and Android apps use the same zero-knowledge, on-device model as the extension. A few platform specifics:
- Biometric unlock (Face ID, Touch ID, or Android biometrics) is handled entirely by your device's secure hardware and operating system. Veridenti never receives, sees, or stores your biometric data.
- Your vault key, when cached so you can unlock without re-typing your master password, is stored in the device's secure Keychain (iOS) / Keystore (Android) — it is device-bound and never leaves your device.
- System autofill (iOS AutoFill and the Safari extension; the Android Autofill service) reads form fields on your device to fill your saved logins and identity — the same local-fill model as the extension. Nothing about the pages you fill is transmitted to Veridenti.
- Deleting your data works the same on mobile: use Security → Delete account in the app, or veridenti.com/account/delete. Removing the app also deletes its local vault from the device.
7. Data sharing, retention, deletion
- We do not sell, rent, or share your data with anyone. There are no advertising or data-broker relationships.
- Delete your account and data: You can permanently delete your account and its encrypted vault at any time — in the app (Security → Delete account) or at veridenti.com/account/delete. This removes the encrypted blob and your account record from our storage. Organization-managed (shared) vaults are controlled by your organization's administrator and are removed through their offboarding process, not here.
- Local data: uninstalling the extension removes your local vault. Keep your recovery key — without your master password or recovery key, an encrypted vault is unrecoverable, by design.
8. Your rights (GDPR / CCPA)
Because we hold only an unreadable encrypted blob and (if opted in) anonymized aggregates, we hold no personal data we can identify you by. You can still request deletion of any synced blob. We do not sell personal information as defined by CCPA.
9. Children
Veridenti is not directed to children under 13 and does not knowingly collect their data.
10. Who we are & contact
Veridenti is operated by Veridenti, LLC, a Michigan limited liability company. We'll post changes to this policy here with a new "last updated" date. Questions: privacy@veridenti.com.
Back to veridenti.com