Privacy policy
Last updated 5 November 2026
The short version
Hushpad encrypts your notes and environment variables in your browser before they are stored or synced. We can't read them. There is no email, no name and no account profile. We don't use analytics, ads or trackers, in the extension or on this website.
On your device
The extension keeps your encrypted vault in your browser's extension storage. While your vault is unlocked, the key that decrypts it is held in the browser's in-memory session storage. It is removed when you lock the vault or close the browser. Your five-word vault code is never stored in readable form; a copy encrypted with your vault key is kept so you can view it in Settings while unlocked.
On the sync server
If sync is on, the extension sends the following to the Hushpad sync server, which runs on Cloudflare Workers with a Cloudflare D1 database:
| What | Why | Can we read it? |
|---|---|---|
| Vault id, derived from your code | To find your vault | It identifies the vault, not you |
| A salted hash of a login key derived from your code | To check you know the code | No, it can't be reversed |
| Your vault key, encrypted with a key derived from your code | So another device can unlock the vault | No |
| Encrypted notes and env sets, with version numbers and timestamps | To sync and merge changes | No. We can't tell a note from an env set |
| A hash of each session token, with its expiry (30 days) | To keep a device signed in | Not usable as a token |
| Your IP address, only after a wrong code | To block repeated guessing | Yes. Deleted within about 30 minutes |
Like any website or API on Cloudflare, requests pass through Cloudflare's network, which may keep standard request logs under Cloudflare's privacy policy.
What we never receive
- Your vault code, or anything that could decrypt your vault.
- The contents, titles or names of your notes, projects, environments or variables.
- Your email address, name or browsing history.
Permissions the extension uses
- New tab override, to show your vault when you open a new tab.
- Storage, to keep your encrypted vault and the unlocked key in your browser.
Hushpad doesn't read the pages you visit and has no access to your tabs' content.
Deleting your data
To remove your vault from a device, open Settings and choose Remove vault from this device, or uninstall the extension. Encrypted data on the sync server stays unreadable without your code. Deleting a vault from the server from inside the extension is coming soon. Until then, ask us through the support section of the Chrome Web Store or Firefox Add-ons listing.
Changes
If this policy changes, we'll update the date at the top of this page. Material changes will also be noted in the extension's release notes.