Privacy Policy

Last updated: October 04, 2026

What We Store

SecretBolt stores encrypted secrets. We never store plaintext content. All secrets are encrypted with AES-256-GCM before being written to the database. After a secret is viewed or expires, it is permanently and irreversibly destroyed.

What We Don't Store

We do not store the plaintext of your secrets. We do not have access to your secret content. We do not store passphrases in plaintext — only bcrypt hashes.

Account Data

We store your email address and encrypted password for authentication purposes. We store API key hashes (not the keys themselves) for API authentication. We store audit logs including IP addresses and timestamps for security purposes.

Contact

Questions about privacy? Email us at hello@secretbolt.io.