This website
This website does not use analytics, tracking cookies, or advertising. Like any web server, the server that hosts it may keep standard access logs (IP address, browser user agent, requested page, and time) for security and troubleshooting.
OpenVireo and OpenVireo Browser
OpenVireo and OpenVireo Browser run locally on your computer. Without an account, none of your stored data is ever sent to us or to a third party.
OpenVireo only contacts a server on the Internet when you ask it to, for example to download a website favicon for an entry, to sync with an OpenVireo account, or to sync with a sync server you configured.
OpenVireo Browser talks only to the OpenVireo app on your computer, through your browser's native messaging. It does not send your passwords anywhere else.
OpenVireo accounts and OpenVireo Web
If you create an OpenVireo account, we store your email address, your account settings, and your vaults. Vaults are encrypted on your devices with keys derived from your master password and your Secret Key before they are uploaded, so we only ever store ciphertext and cannot read your passwords. We also keep the metadata needed to run the service, such as device and session records, vault and organization membership, and an audit log for organizations.
Questions about privacy can be sent to [email protected].