Privacy
Last updated 14 October 2026
What eVault stores
Your secrets are encrypted on your Mac with a key derived from your passphrase. They are written only to the vault folder you choose or, in iCloud mode, to your own private CloudKit database. eVault has no servers and no accounts. We cannot read your vault and cannot reset your passphrase.
Network access
The app is sandboxed without a network entitlement. Sync is performed by macOS (iCloud Drive or CloudKit). Update checks are performed by the Sparkle framework's helper service and fetch a signed update feed from GitHub; they send no personal data. The command-line tool only talks to third-party services (Vercel, Cloudflare, GitHub) when you run a deploy command, using their own CLIs and your own credentials.
Licenses
License keys are verified offline with a public key embedded in the app. No activation server, no usage tracking. The key contains the name and email entered at purchase so you can identify it; it is stored only on your Mac.
Purchases are processed by Polar, the merchant of record, which handles payment details, invoices and VAT under its own privacy policy. Our store keeps the name, email, order id and issued key so we can re-send a key or revoke it after a refund. Refunded keys are listed by id (not by name or email) in later app versions so they stop working.
Analytics and crash reports
eVault contains no analytics SDK. Crash reports go through Apple's standard crash reporter, under your macOS settings, and we only see them if you choose to share them with Apple and Apple shares them with us.