Privacy Policy

Last updated: April 2026

At SecurePass (operated by WebDigiTech), we prioritize your privacy and data security. This Privacy Policy explains how we handle your information and secure your data when you use our application.

1. Local Storage and Your Data (Zero-Knowledge Architecture)

With the introduction of our secure Vault feature, SecurePass operates on a strict Zero-Knowledge architecture. This means:

Passwords & Vault Data: All saved passwords, usernames, and site names are encrypted locally in your browser using military-grade AES-256-GCM encryption.
Master Password: Your Master Password is NEVER sent to our servers. It is strictly used locally (via PBKDF2 hashing) to encrypt and decrypt your vault.
No Cloud Storage: We do not have access to your vault data, nor do we store it on any external servers or databases. Your sensitive data stays solely on your device within your browser's Local Storage.

2. Information We Collect (Analytics & Cookies)

While your passwords and vault remain completely offline and private, we collect minimal, anonymized data to improve our service:

Usage Data: With your consent, we use Google Analytics to understand how visitors interact with our site (e.g., pages visited, geographical region, time spent). This data is anonymized and cannot be linked to your personal identity or your vault.
Cookies: We use local storage/cookies to save your preferences (such as your consent to this policy or your encrypted vault string) safely on your device.

3. Data Security

We implement the Web Crypto API to ensure that all encryption happens client-side. Because we do not store your master password or your decrypted data, if you lose your master password, your vault data is irretrievably lost. We cannot recover it for you.

4. Third-Party Services

We use Google Analytics to help us understand website traffic. Google Analytics may collect information such as your IP address, browser type, and operating system. Google's use of this data is governed by their Privacy Policy. You can choose to opt-out of this tracking via our Cookie Consent banner.

5. Your Rights & Data Deletion

Because your vault data is stored locally on your device, you have complete control over it. You can permanently delete your entire password vault at any time simply by clearing your browser's site data/local storage for secure-pass.app.

6. Contact Us

If you have any questions about this Privacy Policy or our security practices, please contact us at info@secure-pass.app.