Gistwarden Privacy Policy

Gistwarden is built with a strong commitment to user privacy and data security.

1. Zero Data Collection: Gistwarden does not collect, track, store, or share any of your personal data, passwords, browsing history, or extension usage statistics.
2. Local Encryption (Zero-Knowledge): All your vault data (passwords, notes, passkeys, TOTP secrets) is encrypted locally on your device using your Master Password before being stored or synced.
3. Syncing Platform: Your encrypted database is synced directly to your personal GitHub Gist account via the GitHub API. No third-party servers or intermediate servers are involved in storing or transferring your data.
4. Permissions Usage:
5. 'storage': Used to store encrypted vault metadata and settings locally.
6. 'alarms': Used to trigger auto-lock timeouts based on your preference.
7. 'clipboardRead': Used only when you explicitly copy passwords or TOTP codes.
8. 'activeTab': Used for auto-filling login credentials only on the pages you request.

If you have any questions or concerns, please contact the developer via the official GitHub repository.