This policy explains what VaultStorage does with information when you visit this website, use the interactive demo, send something with a passkey, or write to us. It applies to this website and the VaultStorage product.
Who we are
VaultStorage is a product built by a small team based in Surat, Gujarat, India. For anything in this policy, you can reach us at support@vaultstorage.in.
What we collect
We try to collect as little as the product can work with.
- Account details — when accounts are available, the name and email address you sign up with, and a securely hashed password. We never store your password as readable text.
- Documents you choose to store — the files, item details, dates and notes you add to your own vault.
- Transfer details, not files — when you send with a passkey, we briefly hold the six-digit code, the file names and sizes, the total size, and the short connection messages the two browsers exchange. The file contents are never sent to us.
- Messages you send us — whatever you include when you email support or use the contact form.
- Newsletter email — only if you subscribe, and only to send what you subscribed to.
- Basic technical logs — the server records requests, including IP address, browser type and time. We use these to keep the service working and to limit abuse of transfers.
What we never collect or do
- We do not sell, rent or trade your personal information to anyone.
- We do not read, scan or analyse the documents you store for advertising or profiling.
- We do not run advertising networks or third-party tracking pixels on this site.
- We do not receive the contents of files sent through a passkey transfer.
How we use your information
Information is used only for the reasons it was given:
- To run your vault: storing your items and showing them back to you.
- To send the reminders you asked for, before something expires.
- To connect two browsers so a passkey transfer can start.
- To answer your support messages.
- To keep the service secure, including rate limits that stop one device from opening endless transfers.
Passkey transfers, and why files are not stored
A passkey transfer is deliberately built so we cannot hold your files. The sender's browser and the receiver's browser connect to each other directly, and the data flows between them. Our server only introduces the two browsers to each other.
There is no copy of your file on our servers to leak, to hand over, or to forget about later. It also means both devices must be online at the same time for a transfer to work.
The room created for a transfer, together with its file names and connection messages, is removed automatically a short time after the transfer ends, and in any case within a few hours of being created.
Demo data stays in your browser
The interactive demo on our home page runs entirely inside your browser. The sample items, files, folders and notes you create there are kept in your browser's own storage (localStorage and IndexedDB) and are never uploaded to us.
That data stays until you press Reset demo or clear your browser data. Because it is a demo, please use sample files rather than real personal documents.
Cookies and local storage
This website uses no advertising cookies and sells nothing to anyone. A single essential cookie keeps you signed in; without it, signing in cannot work. The demo uses browser storage rather than cookies, as described above.
We do measure how the site is used, with Google Analytics, so we know which pages help and which do not. It is set up to take as little as possible: your IP address is shortened before it is stored, advertising features and ad personalisation are switched off, and your name, email address and anything inside your vault are never sent. You can block it with any content blocker, or with the browser's "Do Not Track" setting, and the site keeps working exactly the same.
Services we rely on
A few outside services are needed to serve this site. Each one may see your IP address as part of delivering the request:
| Service | What it does | What it sees |
|---|---|---|
| Our hosting provider | Runs the website and database | Requests and stored data |
| Google Fonts | Delivers the site fonts | IP address and browser |
| jsDelivr / cdnjs | Delivers shared scripts and icons | IP address and browser |
| Google Analytics | Counts visits and which pages are read | A shortened IP address, the page and the browser |
| Public STUN servers | Helps two browsers find each other for a transfer | Network address information, never file contents |
How long we keep things
- Vault data — kept while your account exists, and deleted when you delete your account.
- Transfer records — removed automatically within hours of the transfer, and the connection messages sooner than that.
- Support emails — kept while we need them to help you, and for a reasonable period afterwards.
- Server logs — kept for a short period for security and troubleshooting.
Your rights over your data
You can ask us to:
- Tell you what information we hold about you.
- Give you a copy of your vault data.
- Correct anything that is wrong.
- Delete your account and everything in it.
- Stop sending you the newsletter, at any time.
Write to support@vaultstorage.in from the address on your account and we will act on it. Deleting an account removes your stored files; once done, it cannot be undone.
How we protect what we hold
The site is served over an encrypted connection, passwords are stored only as secure hashes, and database queries are written so that stored data cannot be pulled out by crafted input. Your uploaded files sit behind your own login and are not readable by other accounts. Passkey transfers are encrypted directly between the two browsers and never reach us.
No system is perfect. If you believe you have found a security problem, please write to us before sharing it publicly, and we will work with you on a fix.
Children
VaultStorage is meant for adults managing household paperwork. It is not directed at children under 16, and we do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will remove it.
Changes to this policy
As the product grows, this policy will be updated. The date at the top always shows the latest version, and material changes will be announced on the site before they take effect.
Contact us
Questions about this policy, or about anything we hold:
Email us and a person from the product team will reply, usually within two working days.