Privacy policy

Last updated 5 October 2026

The short version: we hold encrypted data we can't read, and almost nothing else. No accounts with email addresses, no cookies, no analytics.

01Who we are

pswrds is the password manager at https://pswrds.com, operated by SEMLIN s.r.o., company ID (IČO) 27569837, registered in the Commercial Register kept by the Municipal Court in Prague, file C 114792. The company is responsible for your data under the GDPR (the “controller”). For anything about your data, write to info@pswrds.com.

02What we store

• A fingerprint of your username. Your device turns your username into a one-way code; the username itself is never sent.
• Your encrypted vault. We can't decrypt it. It is padded to a fixed size, so its size doesn't reveal how much is inside.
• A few technical details: when the vault was created, whether it is paid, a check value that lets only you save changes, and a counter for each save.

03What we don't collect

No email address, name or phone number. No cookies, no analytics, no advertising or tracking scripts, and nothing loaded from other companies' servers.

04IP addresses

Like every website, our server receives your IP address with each request. pswrds itself only stores a keyed hash of it, to limit how many requests one connection can make (for example, invitation codes). Our hosting company, Namecheap, keeps standard server logs for a limited time.

05Payments

Payments are handled by NOWPayments. On their payment page they see the payment details and your IP address, and their own privacy policy applies. We store the invoice number, its status and time, and a check value. We never send them your username, and we keep nothing that links a payment to your vault.

06On your device

Your browser keeps your light or dark theme choice, and copies of the app's files so it can open without a connection. If you turn on fingerprint unlock, it also keeps a locked copy of that one wallet's key, which only your fingerprint or face can open on that device. An invitation code you request is passed to the app inside that browser tab only. None of this is sent to us.

07Email

If you write to us, we see your email address and your message. We use them only to answer you and delete them when they are no longer needed.

08How long we keep data

Vault data stays until the vault is deleted. Our own database backups are kept for 7 days; the hosting company's backups can be kept for several weeks.

09Your rights

Under the GDPR you can ask to see, correct or delete your data, or object to how it is used. Because we can't tell who owns a vault, we may need you to show that a vault is yours, for example by unlocking it. You can also complain to your data protection authority.

10Changes

We'll post any changes to this policy here, with a new date at the top.