Privacy Policy

1. What Veridenti stores, and where

• Your vault (logins, passwords, TOTP secrets, identities, notes, bookmarks, the Legacy Vault, private custom field values such as rewards/membership numbers, and per-site preferences) is stored encrypted on your device (browser local storage), using a 256-bit AES-GCM key derived from your master password via PBKDF2-SHA256 (310,000 iterations). We never receive your master password or the key.
• Settings (theme, thresholds, per-site fill modes, "this is safe" allow-list) are stored locally and, if you enable sync, inside the same encrypted vault blob.

2. Optional cloud sync

If you enable sync, your vault is uploaded as an encrypted blob to our backend (a Cloudflare Worker with KV storage). The server stores only the encrypted blob, a one-way authentication hash, and a salt. The server cannot decrypt your vault — it never has the key. This is zero-knowledge / end-to-end encryption. If you never enable sync, nothing leaves your device.

3. Masked email

Masked email is generated through a provider you choose (Fastmail, addy.io, SimpleLogin, DuckDuckGo, Firefox Relay, or Forward Email) using your own account/API token, stored encrypted in your vault. The request goes directly from your browser to that provider — it never passes through Veridenti's servers. Veridenti does not operate an email service and does not receive your messages.

4. Anonymous usage stats — off by default, opt-in only

Veridenti contacts no analytics server unless you explicitly turn on "Share anonymous usage stats." If you opt in, what we collect is anonymous and aggregate: an active-device count via a token that rotates weekly (not a persistent identifier); coarse country (never city, never a stored IP); and form-fill success rate and which form types get fixed.

What we never collect, even when opted in: your logins, passwords, or vault contents; any value you type; the specific sites you visit or full URLs; your identity; your IP or precise location. There are no third-party trackers, no advertising SDKs, and no analytics cookies anywhere in Veridenti.

5. Phishing / "Protect" features are 100% local

Veridenti's anti-phishing protection (look-alike-site warnings, password-reuse warnings, form-skimmer detection) runs entirely on your device, comparing pages only against your own saved logins. Your browsing is never sent anywhere for these checks.

6. Permissions

Veridenti requests broad host access (http://*/*, https://*/*) for one reason: a password manager must be able to fill and protect logins on any site you use, and it can't know in advance which sites those are. It does not read or transmit page contents; it looks at form fields locally to fill them and to detect threats.

7. Data sharing, retention, deletion

• We do not sell, rent, or share your data with anyone. There are no advertising or data-broker relationships.
• Sync data: you can delete your synced vault at any time from Settings; deletion removes the encrypted blob from our storage.
• Local data: uninstalling the extension removes your local vault. Keep your recovery key — without your master password or recovery key, an encrypted vault is unrecoverable, by design.

8. Your rights (GDPR / CCPA)

Because we hold only an unreadable encrypted blob and (if opted in) anonymized aggregates, we hold no personal data we can identify you by. You can still request deletion of any synced blob. We do not sell personal information as defined by CCPA.

9. Children

Veridenti is not directed to children under 13 and does not knowingly collect their data.

10. Changes & contact

We'll post changes here with a new "last updated" date. Questions: privacy@veridenti.com.