Privacy

Last updated: 22 October 2026.

This notice is for the Swiss Federal Act on Data Protection (nFADP) and, where it applies to you, the GDPR.

Who is responsible

Alix Sàrl, Chemin des Pléiades 3, 1206 Genève, Switzerland. IDE/UID CHE-453.922.265. Privacy and GDPR: privacy@alix-services.com. Other questions: support@alix-services.com.

What we store

• Your email address, so we can send a sign-in code and, if you asked for it, a reminder of where you stored the recovery key.
• A session cookie so the browser stays signed in. See Cookies.
• Ciphertext, public keys, sizes, and hashes. The recovery key, the seed, and the file contents are not sent to us.
• The place labels you pick for the recovery key, such as "Password manager". The key itself is not included.
• The IP address shown when you connect a computer, and IP addresses used to limit abusive requests.

Why

We use this data to run the account, deliver the sign-in code, store the encrypted backups, and send the recovery-key reminder you can turn off. We do not sell personal data. We do not use it for advertising.

How long

The account data stays while the account is open. Sign-in codes expire after minutes and are stored as hashes. The reminder clock is a date on the place-label row. Ciphertext stays until you delete it, or until the 90-day lock ends and the account is closed. Rate-limit rows expire with their window.

Your rights

You can ask for access, correction, deletion, a copy, or a limit on processing. Write to privacy@alix-services.com. We will answer. We cannot decrypt your files, so a copy of the file contents is something you produce with your recovery key. You can also complain to the Swiss Federal Data Protection and Information Commissioner, and to your local authority if the GDPR applies.

Where processing happens

Your backups are stored in Switzerland. The website and the API run on Cloudflare. Sign-in mail is sent by Alix Mail. The list is on Subprocessors.