The app

SilentKey collects nothing. It has no analytics, no crash reporting to us, no advertising identifiers and no third-party libraries that phone home. It does not need an account to work: create a vault and it lives on your device.

The sync server

Syncing is optional and off until you turn it on. When it is on, the server stores encrypted blobs and, for each change, a sequence number and a timestamp. It cannot read item names, addresses, passwords or attachment file names, because everything is sealed on your device before it is sent.

To recognise your devices it stores an account identifier of your choosing and a public key per device. Sign-in is a signature, so the server never holds a password of yours.

You may run the server yourself. It ships as one container image and needs nothing but a disk.

This website

Static pages on Netlify. No cookies, no trackers, no analytics, no embedded fonts or scripts from anywhere else. The one thing kept in your browser is which language you picked, so the site does not ask again — and it is removed when you clear site data.

Netlify processes server logs, including IP addresses, as part of serving the pages. We do not read them for anything else.

If you write to us

We keep the e-mail for as long as it takes to answer it, and then it is deleted along with the rest of the mailbox in the ordinary course of things.

Your rights

Under the GDPR you may ask what we hold about you, ask for a copy, ask for corrections and ask for deletion. Since we hold nothing but an e-mail you sent us and — if you use our server — encrypted blobs we cannot read, the answer is usually short. Write to [email protected].

Changes

If this ever changes materially, the date below changes with it and what changed is said here plainly.

3 September 2026

Back to the front page