Gistwarden is built with a strong commitment to user privacy and data security.
Zero Data Collection: Gistwarden does not collect, track, store, or share any of your personal data, passwords, browsing history, or extension usage statistics.
Local Encryption (Zero-Knowledge): All your vault data (passwords, notes, passkeys, TOTP secrets) is encrypted locally on your device using your Master Password before being stored or synced.
Syncing Platform: Your encrypted database is synced directly to your personal GitHub Gist account via the GitHub API. No third-party servers or intermediate servers are involved in storing or transferring your data.
Permissions Usage:
'storage': Used to store encrypted vault metadata and settings locally.
'alarms': Used to trigger auto-lock timeouts based on your preference.
'clipboardRead': Used only when you explicitly copy passwords or TOTP codes.
'activeTab': Used for auto-filling login credentials only on the pages you request.
If you have any questions or concerns, please contact the developer via the official GitHub repository.
