Privacy Policy

1. Information we handle

We handle only the information needed to provide WebVault:

• Account information: your email address, optional display name, and a service-generated account identifier used to sign in and secure your account.
• Your WebVault content: saved website addresses, titles, descriptions, categories, favourites, display preferences, visit activity, and optional custom icons that you choose to add.
• Subscription information: your subscription status and technical Stripe customer, subscription, and price identifiers. Card and bank details are processed by Stripe and are not stored by WebVault.
• Technical information: a service-generated device identifier, a hashed installation secret, a basic device and browser label, approval and last-seen times, and active-session information used to provide sync, apply device limits, secure the service, and troubleshoot it. New-device approval uses a temporary confirmation request and an email to your account address.

2. How we use information

We use this information to create and protect your account, save and synchronise your bookmarks, provide search and organisation features, process subscriptions, prevent abuse, and maintain the service.

WebVault does not sell personal information and does not use your saved websites or account information for advertising.

3. Service providers

WebVault uses carefully selected providers to operate the service:

• Supabase provides authentication, database, and file-storage services.
• Stripe processes subscription payments and customer billing management for web subscriptions.
• Vercel hosts the WebVault website and application services.

When you request automatic metadata for a website you add, WebVault fetches that website to obtain its title and description. A favicon may be requested from Google's favicon service. The submitted website address is used only for that request.

4. Sharing and security

Your bookmark data is private to your account. We share information with the providers above only as needed to run WebVault, meet legal obligations, or protect the security of the service and its users.

We use access controls and encrypted connections to protect data in transit. No online service can guarantee absolute security, so please use a strong, unique password.

5. Account deletion and retention

Your account and WebVault content are retained while your account is active. You can remove saved sites and categories from the dashboard at any time.

To permanently delete your WebVault account while signed in, use Profile & settings → Delete account in the app. This deletes your WebVault account, bookmarks, categories, registered devices, and uploaded custom icons. If you have an active WebVault subscription through Stripe, it is cancelled before the WebVault account is deleted.

If you cannot sign in or no longer have the app, use our public account-deletion page or email tneykov@gmail.com from the email address associated with your account. We may ask you to verify ownership before completing an email request.

We do not keep a separate archive of deleted WebVault account content. Stripe may retain payment and invoice records where required for legal, accounting, fraud-prevention, or security reasons; WebVault does not receive or store your card or bank details. Service-provider backups and security logs may persist only for their standard disaster-recovery and security-retention periods and are not used to restore a deleted WebVault account.

6. Cookies and local storage

WebVault uses essential browser storage and authentication tokens to keep you signed in and to remember service settings. These are used to operate the service, not for behavioural advertising.

An installation secret is stored on your device to associate requests with an approved browser or app installation. Clearing that storage or reinstalling the app requires approval again. You can view and revoke approved devices in your profile settings.

7. Children

WebVault is not directed to children under 13. If you believe a child has provided personal information, please contact us at tneykov@gmail.com.

8. Changes to this policy

We may update this policy when WebVault changes or when legal requirements change. The latest version is always published at this address.