Privacy Policy

Last updated: August 28, 2026

Introduction

This policy explains what ShamirVault does with information, on the website at shamirvault.com and in the app. It is written to be checked rather than trusted: everything below can be verified with your browser's developer tools.

100% Local Processing

Every cryptographic operation — splitting, rebuilding, encrypting and decrypting — runs on your own device. Your secrets, passphrases and seed phrases are never sent anywhere, and we have no way to see, access or store them. We couldn't hand them over if we were asked to.

What we don't do

ShamirVault has no analytics. We do not know how often you use the app, how many parts you create or what you split. The free version shows ads — never on a screen displaying a secret — and an annual plan removes them. Paying creates an anonymous account: a random identifier that answers one question, “has this device paid?”. It carries no name, no email and no data of yours. Splitting and rebuilding never require it, and never expire.

What does leave your device

Being precise matters more than sounding good, so here is the complete list. None of it carries your secret, your parts or your passphrase — those are never sent anywhere, with or without a subscription.

  • Firebase (Google) — on mobile only. On startup the app registers an anonymous installation identifier and checks the minimum supported version, which is how we can push people off a build that turns out to have a defect. The web app makes no such request.
  • Cloud backup — optional, subscribers only, and off unless you press the button. What is uploaded is the encrypted file: without the key it is noise. The parts are never uploaded, by anyone, ever — the app refuses to. We keep the lock; you hand out the key. Stored in Europe, and you can delete it whenever you want, subscription or not.
  • Ads (Google AdMob) — free version only, on mobile. The ad SDK sees the usual advertising identifiers. It is never loaded on a screen showing your parts, a rebuilt secret or your vault, and the annual plan removes ads entirely.
  • Subscription status — only if you subscribe. The app opens an anonymous session and stores, on our server, whether that account has an active plan. No name, no email, nothing you typed into the app.
  • App attestation (Firebase App Check) — only where the app talks to our server, which today means checking a purchase. It proves the request comes from a genuine build, not from a script.
  • Crash reports (Firebase Crashlytics) — mobile only, and only in published builds. If the app crashes, we receive the technical trace, the device model and the app version. Never the content of any field.

Cookies and local storage

This website sets no cookies. It uses your browser's local storage for one thing only:

  • Language preference — your EN/ES choice, so you don't have to pick it again.

Third-Party Services

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

Children's Privacy

ShamirVault is not directed at children under the age of 13. We do not knowingly collect personal information from children.

Your Rights

You have the right to:

  • Clear your browser's local storage at any time.
  • Use ShamirVault with no connection at all. Once loaded, it works offline — and for a seed phrase, that is what we would recommend.
  • Write to us with any question about this policy.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy, please contact us at info@shamirvault.com.