Privacy Policy

Last updated: February 15, 2026

1. Zero-Knowledge Architecture

EncryptMyKeys does not collect, store, transmit, or have access to any data you encrypt or decrypt. All cryptographic operations (AES-256-GCM encryption and decryption) are performed entirely within your web browser using the Web Crypto API. Your plaintext, passphrases, and encrypted output never leave your device.

2. What We Do Not Collect

We do not collect: your plaintext data, your passphrases, your encrypted output, your decrypted results, or any content processed through our encryption tools. We have zero knowledge of what you encrypt.

3. What We Collect

Analytics: We use Google Analytics (GA4) to collect anonymized usage data such as page views, device type, browser, country, and session duration. This data does not identify individual users and contains no encrypted content.

Legal Portal (Pro): If you register for the Pro Legal Portal, we store your username, name, firm name, email, and bar number for account management purposes. Payment information is processed by PayPal — we do not store credit card details.

4. Cookies

We use minimal cookies: language preference (stored locally in your browser via localStorage), session cookies for the Legal Portal login, and Google Analytics cookies for anonymized traffic analysis.

5. Third-Party Services

We use: Cloudflare for CDN, DDoS protection, and security; Google Analytics for anonymized traffic data; PayPal for payment processing (Pro plan only). Each service operates under its own privacy policy.

6. Data Security

Our website is served over HTTPS with HSTS. We use Cloudflare WAF, Bot Fight Mode, and Turnstile for protection. The Legal Portal uses server-side session management with secure, HTTP-only cookies.

7. Data Retention

Since we don't collect your encrypted data, there is nothing to retain. Legal Portal account data is retained while your account is active and deleted upon request.

8. Your Rights

You may request access to, correction of, or deletion of your Legal Portal account data at any time by contacting us at [email protected].

9. Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

11. Contact

For privacy questions, contact us at [email protected].