Privacy Policy

1. Summary

This website collects no personal data about you: no cookies, no analytics, no advertising, no third-party tracking. The KalderaShield application never sees and never transmits your vault data — everything stays on your device. Below we explain everything in detail, including the short-lived technical records inherent to any hosting infrastructure and your rights.

2. Your vault data: never collected

KalderaShield's zero-knowledge, offline-first design means the passwords, usernames, notes, passkeys and attachments stored in your vault are never collected, processed or shared under any circumstances. Your data is stored only on your device, encrypted with keys derived from your master password. We never hold a copy of your master password or the keys derived from it.

3. This website: cookieless and tracking-free

This website uses no tracking cookies, no advertising cookies, no fingerprinting and no analytics scripts. Visitor behaviour is not measured; no third-party requests are made. The only data stored on the site is your interface language preference, kept in your browser's localStorage. This data never leaves your device.

4. Hosting and server records

This site is served from infrastructure we administer ourselves. Like any web server, it may keep short-lived technical access records — request time, requested address and the connecting network address — to keep the service available and prevent abuse. These records are not used to build profiles, are not shared with third parties for advertising or analytics, and are automatically deleted after a short retention period.

5. Third-party services

Application and extension packages are distributed via GitHub Releases; during a download, GitHub/Microsoft's own privacy practices apply and no data is transmitted to us. The install.sh script reads the version number and SHA-256 digests from GitHub Releases solely for integrity verification. When you contact us by email, your message passes through your email provider's systems; beyond delivering a reply, it is processed for no other purpose.

6. Your rights

Personal data is processed only in limited cases — for example when you email us. In that case you have the right to learn about, access, correct, delete and object to the processing of your data under Article 11 of Turkey's KVKK (Law No. 6698) and, in the European Union, the GDPR. Send requests to admin@kalderashield.com; they are answered within 30 days at the latest.

7. Children's privacy

This site and application are not directed at children under 13, and no data is knowingly collected from them.

8. Policy changes and contact

This policy is updated when the application or the hosting infrastructure changes; the update date is shown at the top of the page. The data controller is the KalderaShield project owner. Privacy questions: admin@kalderashield.com

In case of any discrepancy, the Turkish text of this policy governs.