Privacy
Short, because there is almost nothing to disclose. What the app does with your data (nothing leaves your device) and what this site records (no cookies, no trackers).
The app
tigerpassword has no servers and no account. Your vault is an encrypted file on your devices. When you turn on sync, it goes to a cloud account or folder you choose, as ciphertext; we never see it and could not read it if we did. The app makes no network requests except the ones you ask for: syncing to your provider, backing up to your destination, and — only when you run Vault Health — a breach check that sends the first five characters of a hash to Have I Been Pwned and nothing else.
There is no telemetry, no analytics, no crash reporting, and no update check that identifies you.
This website
- No cookies. No trackers. No third-party scripts, fonts or images. The content-security policy of every page makes loading them impossible.
- Server logs. Our server records, for each request, the path, the status, the size, the time it took, the referring site (not the page), and the browser family. It does not record your IP address or query strings. A daily-rotating one-way hash of the address gives us a count of unique visitors per day without storing addresses.
- Your theme choice (light or dark) is saved in your browser’s local storage and never sent anywhere.
- The contact form sends your name, email address, topic and message to us by email through Resend, our email provider. We keep the email for as long as we need it to answer you. Nothing is stored on the web server.
- Launch updates. If you sign up, we email you a confirmation link first. Only after you click it is your address added to our list, which is held by Resend. Every email has an unsubscribe link, and unsubscribing removes you.
Your rights
You can ask what we hold about you and ask us to delete it by email:
Who we are
TigerCodes, LLC. Contact details are on the imprint.