Privacy

The short version

Ravenpass does not collect your data. There is no Ravenpass account, no analytics and no telemetry. Your vault is encrypted on your device and stored where you choose.

The apps

Your passwords, passkeys, codes and other items stay in one vault file, encrypted on your device before it is written anywhere. You choose where that file lives: on your device, or in a cloud drive folder you already use. Ravenpass runs no servers that receive or keep your vault.

The apps connect to the internet only to fetch the icons of websites you save, from those websites, and on Android to read which apps a website trusts, from that website's own address. You can turn website icons off in Settings.

The browser extension

The extension stores no passwords. When you sign in, it asks the Ravenpass app on the same computer over an end-to-end encrypted local connection and fills in only what you choose. It sends nothing to Ravenpass or anyone else.

It keeps the keys for that connection and your settings in your browser's storage, and removes them when you unlink it. While it is linked, it turns off the browser's own password saving and autofill so two password managers do not offer at once; you can turn them back on.

This website

This website uses no cookies and no analytics. Its hosting provider processes standard request data, such as IP addresses, to deliver pages and protect against abuse.

The trailer on the home page is embedded from YouTube in privacy-enhanced mode. YouTube receives standard request data when the player loads, and its own privacy policy applies once you play the video.

Contact

Ravenpass is open source: you can check all of the above in its code. Questions go to the issue tracker, and security reports follow the project's security policy.