Privacy Policy
Last updated: February 2025
1. Zero-Knowledge Architecture
EnigmaCrypt is built on a zero-knowledge model. Your secrets are encrypted in your browser before they reach our servers. We never see, store, or have access to:
- Your unlock passwords
- Unencrypted secret content
- Encryption keys derived from your password
We only store encrypted blobs and metadata (creation date, view count, expiration settings). Even we cannot decrypt your secrets without your password.
2. Information We Collect
Secrets: Encrypted content only. We cannot read it.
User accounts (if you sign up): Username, email (if provided), and a bcrypt-hashed password. We do not sell or share this data.
Usage data: We may collect anonymous usage statistics (e.g., page views) to improve the service. This does not include secret content or passwords.
3. Cookies and Session
We use session cookies for authenticated users. These are essential for the service to function. We do not use third-party tracking cookies for advertising.
4. Data Retention
Secrets expire according to the settings you choose (1 hour to 30 days, or never). Expired secrets are automatically deleted. You can also delete secrets manually.
5. Contact
For privacy-related questions: contact@websoon.com.ar