Privacy Policy

Last updated: September 2026

Scope

This Privacy Policy describes how the Valid Vault browser extension and Android application handle information. Both are built from the same source code and are governed by this policy.

Information We Collect

Valid Vault does not collect any information. The application has no servers, no backend, and no user accounts. It does not use analytics or telemetry, and it does not transmit information to the developer or to any third party.

Information Stored on Your Device

To function as a password manager, Valid Vault stores the following on your device, encrypted with AES-256-GCM under a master key only you can unlock:

• Website logins you save, including site, username, password, and a replaced password kept for restore after a change
• Personal information you enter for form filling, such as name, phone, address, and email addresses
• Miscellaneous credentials you enter, such as Wi-Fi passwords or license keys
• Crypto wallet seed phrases and notes you enter
• Bookmarks you save, including page address and title
• Your unlock methods, stored only as wrapped copies of the master key, never as passwords or password hashes
• Application settings, such as the auto-lock time and password generator length

This data is stored locally, in the browser extension's own storage or the Android app's storage. It is not transmitted to the developer or any third party.

Permissions

The browser extension requests the following permissions solely to operate as a password manager. Each permission is used locally on your device and is not used to collect or transmit information:

• Host access: to detect login, signup, and personal info forms on websites you visit and fill your saved details into them when you click the Valid Vault tag on a field. Field attributes are read to identify fields, and the values you submit in a login form are read only to offer saving them. No other page content is read, stored, or transmitted.
• activeTab: to read the address and title of the current tab when you open the popup, so the page can be saved to or removed from your bookmarks.
• Storage: to store the encrypted vault and application settings locally on your device.
• Alarms: to lock the vault after the idle time you choose.
• Side panel: to show your encrypted bookmarks in the browser side panel.

Activity and Auto-Lock

To keep the vault open while you are using your browser, the extension notes that real mouse, scroll, click, or key activity happened and resets the auto-lock timer. It does not record what you typed, what you clicked, or where. Only the time of the last activity is kept, in memory, and it is cleared when the browser closes.

Device-to-Device Sync

Valid Vault allows the vault to be moved between a user's own devices using QR codes or an exported file. One device displays the encrypted vault as a QR code and another device scans it, or the user saves and opens the encrypted file themselves. The vault stays encrypted throughout, and the master key only leaves a device wrapped under a passphrase and security questions chosen by the user. This transfer occurs directly between the user's devices and does not involve a server or any external service.

Third Parties

Valid Vault does not share information with third parties. It contains no advertising, no analytics providers, and no external services that receive user information.

Data Retention and Deletion

All data is stored on your device and remains under your control. You may clear the vault within the application's settings, or remove the extension or uninstall the application to delete its stored data from your device.

Children's Privacy

Valid Vault is a general-purpose application and is not directed at children. It does not collect personal information from any user; anything entered stays encrypted on the user's own device.

Changes to This Policy

Any changes to this policy will be posted on this page with an updated date.

Contact

Valid Vault is an open-source project maintained by Rook. Source code and contact options are available on GitHub.