Privacy policy

Last updated: October 2026. Data controller: Keynox, contact@keynox.fr.

What we keep

• Your account: name, email address, language, sign-up and last login dates, and your rating if you give one.
• Your login password: only an irreversible fingerprint (Argon2id hash), never the password itself.
• Your saved passwords: encrypted in the database, unreadable without your vault code. Your code and the answers to your secret questions are never stored in plain text.
• Your devices: the browser and system used (e.g. “Safari · iPhone”), to warn you of a login from a new device.
• Security: IP addresses are used briefly, in fingerprinted form, to limit repeated attempts; this data is deleted automatically after one hour at most.
• Messages sent through the contact form, and donations: the payment is handled by PayPal; Keynox only keeps the order number and the amount.

Why

To provide the service you signed up for (your account and vault), to protect it against abuse, and to answer your messages. Keynox shows no advertising, uses no trackers and never sells or shares your data.

How long

As long as your account exists. Accounts whose email was never verified are deleted after 24 hours. When you delete your account (Profile › Delete my account), your account, devices and saved passwords are erased immediately; host backups are overwritten within a few weeks.

Cookies

Only cookies needed for the service: your session, your language and theme, and recognition of your device. No advertising or audience cookies.

Where

Data is hosted in France by o2switch (Clermont-Ferrand). Payments are handled by PayPal under its own privacy policy.

Your rights

You can access, correct, export or erase your data, and object to its processing, by writing to contact@keynox.fr. You can also lodge a complaint with the CNIL (cnil.fr).