Privacy

The short version

Musubi Vault stores your secrets as ciphertext it cannot open. Your master password never leaves your device and is never sent to the server, so we cannot read your entries, cannot recover them for you, and cannot hand their contents to anyone else. What follows is the long version of that sentence, including what the browser extension does.

What we collect

Two categories, and these are the same two declared on the Chrome Web Store listing for the extension:

Authentication information

The passwords, credentials and one-time-code secrets you choose to store. They are encrypted on your device before they are sent, and reach us only as ciphertext.

Personally identifiable information

The account you sign in with — your identifier and email address — which is how we know whose vault to serve. Your entries also routinely contain usernames and email addresses, and those are inside the ciphertext we cannot read.

What we do not collect

Your browsing history. The extension deliberately does not request the tabs permission, so it cannot see the addresses of your open tabs. It learns the address of one page only at the moment you ask it to fill something there, and that address is not stored or transmitted.

The content of the pages you visit. When you press Fill, the extension reads the type and name of the form’s input fields to decide which one is the username, which is the password and which is the one-time code. That reading happens in the page, lasts as long as the fill, and never leaves your browser.

Your location, your health, your payment details, your messages, and your clicks and keystrokes. There is no analytics, no advertising and no third-party tracking code in either the site or the extension.

What the extension stores on your device

The tokens that identify your installation to the server, plus your server address and selected workspace, in the browser’s extension storage. The key that opens your vault is never written to storage: it exists only in memory and is discarded when the browser reclaims the extension, which is why the vault re-locks on its own.

When you copy a value, it goes to your system clipboard. Anything that reads your clipboard afterwards can read it, and the extension cannot clear it once it has closed — this is a limit of the clipboard, and saying so is more honest than implying otherwise.

Who else sees it

Nobody. We do not sell or transfer your data to third parties. We do not use it for any purpose unrelated to running the vault, and we do not use it to assess creditworthiness or for lending. The extension contacts exactly one host, the vault server itself, and no other.

If you share an entry with someone in your account, they can open it — that is the feature — and the sharing is done with keys, not by us decrypting anything on your behalf.

Keeping and deleting

Your entries are kept until you delete them or delete your account, at which point the ciphertext is removed. Because we never held the key, deletion is the only operation we could ever perform on the contents.

Asking about any of this

Write to privacy@musubi.ar.