Privacy

Effective date: [PLACEHOLDER: date] · Version 1

Who we are

CryptKeeper is operated by Duveon LLC, a Wyoming limited liability company in the USA. We are the controller of the personal data described here. Questions: support@duveon.com.

The app

CryptKeeper runs on your Mac. Your vaults, filenames and passwords stay on your machine and are never sent to us. License checks happen offline: your key is signed by us and verified on your Mac. The app has no analytics, tracking or crash reporting. Your license key contains no personal data.

The app makes network requests in two cases only:

• Update check. It periodically fetches a version file from updates.cryptkeeper.store. Like any web request, our server sees your IP address and your app's User-Agent (which includes the app version and your Mac's architecture).
• Nostr unlock (Pro, optional). If you unlock with a Nostr key or Amber, the app connects to these relays: wss://relay.nsec.app/ and wss://relay.damus.io/. Those relays see your public key and IP address. We do not use this to identify you, and your private key stays in the app or on your signer device.

The website

We use no cookies and no analytics. We save your colour-scheme choice in your browser's localStorage. Our web server keeps standard access logs: IP address, time, page requested, and browser.

Our pages load a font from Google Fonts (fonts.googleapis.com). That request sends your IP address to Google.

Buying a license

Pro licenses are available for purchase on request, and this site has no checkout. When you ask to buy one we receive your email address and your message, and we reply with payment details. Payment is taken by our payment provider, Zaprite, which collects your email address and your payment details — card payments, once they are enabled there, are processed by Stripe through Zaprite. We never receive your card number or your Bitcoin private keys. We then email your key.

We keep a record of the licenses we issue and the payments we receive — your email address, the amount, the payment method, the date, and whether a key was sent — so we can deliver or reissue your key, handle refunds and keep accounting records. Our email provider, Resend, sends your key and receipts. We do not sell your data.

Testers who share feedback can ask for a free beta key instead. We keep the same record of the key we issue; no payment is involved.

Who receives it

Zaprite (USA) for payment processing · Resend for email · Contabo (Germany) for the servers hosting this site and our records of licenses issued · Google for font delivery. If card payments are enabled, Stripe processes them through Zaprite.

If you are in the EU or UK, some providers are outside your country. Where required, those transfers rely on the providers' own safeguards, such as Standard Contractual Clauses.

How long we keep it

Order and license records are kept while needed to deliver or reissue your key, handle refunds, and meet accounting and tax obligations. We do not currently delete them automatically. Server logs are held by our hosting stack; we have not set a retention period for them. You can ask us to delete the rest of your data at any time, but we cannot delete records we must keep by law.

Your rights

You can ask to access, correct, delete, restrict or receive a copy of your data, object to our use of it, and complain to your local data-protection authority. Email support@duveon.com from the address you contacted us from, or tell us which key or order you are asking about.

Children

CryptKeeper is not for children. We do not knowingly collect data from under-18s.

Do Not Track

We do not track you across websites, so we ignore Do Not Track signals.

Changes

If we make a material change we will update this page, its effective date and version, and note it on the site.

Contact

Privacy questions: support@duveon.com.