A small website.
A clear data boundary.

Last updated: October 1, 2026 · Development preview

This website

The site uses locally hosted styles, scripts, and images. It has no analytics scripts, advertising pixels, contact forms, account system, or cookie-based tracking. Interactive examples run locally in your browser and use fictional data.

The site does not request USB access, read your vault, or collect a master password, device PIN, or recovery words. Its guide choices appear in the page URL so you can share a setup path; they are not saved to browser storage.

Like any web host, the hosting provider may process IP addresses, request paths, timestamps, and connection information to deliver and protect the site. Provider-specific logging and retention depend on the final hosting configuration.

The extension and device

Your password-vault records are stored encrypted on the microSD card. After authentication, the extension can display public directory metadata. It receives a private record only after device approval; that information is exposed to the computer and governed by the active view’s lifetime and your sensitive-information timeout.

Master-password entry is part of the extension or the device’s vault flow, never this website. A master password typed on a compromised computer can be captured by that computer. Device PINs and recovery words belong on the device touchscreen.

Website icons

The extension handles favicons and stores its icon cache on the computer. Retrieving an icon can disclose the requested website and your IP address to the site or icon source. A favicon is a visual aid, not proof of a website’s identity or trustworthiness.

Backups and exports

An encrypted vault backup and its recovery words together are sufficient to recover passwords. Store them separately. Readable password-manager exports used for importing expose their contents to the computer; handle and remove them accordingly.

Development status

This is a development project. The site is not a statement of regulatory certification, completed independent security audit, or production release acceptance. Review the current release requirements.