Privacy Policy
Last updated: March 3, 2026
seQRets does not collect, store, transmit, or sell your data. Period.
All encryption, decryption, and secret splitting happens entirely in your browser. Your secrets, passwords, keyfiles, and Qards never leave your device. There are no user accounts, no cloud storage, no servers processing your data, and no telemetry of any kind.
seQRets does not use any analytics, tracking pixels, fingerprinting, or telemetry services. There is:
- No Google Analytics
- No usage tracking
- No error reporting services
- No ad networks
- No user behavior monitoring
seQRets does not set any cookies. The app uses your browser's local storage solely for:
- Theme preference — remembering your light/dark mode choice
- Bob AI disclaimer — remembering that you acknowledged the AI disclaimer
- Bob AI API key — your Gemini API key, if you choose to provide one (stored locally, never transmitted to seQRets)
This data stays on your device and is never sent anywhere.
All cryptographic operations are performed client-side in your browser:
- Secrets are encrypted and split entirely on your device
- QR codes are generated locally
- Secret restoration happens locally
- Inheritance plans are encrypted and decrypted locally
No data is sent to any seQRets server because there are no seQRets servers. The app is a static site hosted on GitHub Pages.
Bob is an optional AI assistant powered by Google's Gemini API. If you choose to use Bob, your chat messages are sent directly from your browser to Google's servers for processing.
When using Bob:
- Messages are sent to Google's Gemini API using your own API key
- seQRets never sees, stores, or relays these messages
- Google's Gemini API Terms of Service and privacy policies apply to those interactions
- You are warned about this before your first use of Bob
Do not share secrets, passwords, seed phrases, or private keys with Bob.
The seQRets web app makes only two optional external network requests:
- Bitcoin price ticker — fetches the current BTC/USD price from the Coinbase public API. No user data is sent. This is a read-only, unauthenticated request.
- Bob AI — if you choose to use it, chat messages are sent to Google's Gemini API (see above).
All core functionality (encryption, splitting, QR generation, restoration) works fully offline with no network access required.
The following third-party services may be involved when you use seQRets. Each has its own privacy policy and terms:
| Service | Purpose | Data Shared |
|---|---|---|
| GitHub Pages | Hosting | Standard server logs (IP, user agent) |
| Coinbase API | Bitcoin price display | None (unauthenticated read-only request) |
| Google Gemini API | Bob AI Assistant (opt-in) | Your queries, sent directly with your API key |
Children's Privacy
seQRets is not directed at children under the age of 13. We do not knowingly collect personal information from children. Since we do not collect personal information from anyone, this concern is moot in practice — but we state it here for completeness.
Changes to This Policy
If we update this policy, the revised version will be posted here with an updated date. Because seQRets does not collect email addresses or user accounts, we cannot notify you directly of changes. Material changes — particularly any that involve new data collection — will also be noted in our GitHub repository.
Contact
If you have questions about this privacy policy, contact us at hello@seqrets.app. For security concerns, reach out to security@seqrets.app.
This policy applies to the seQRets web app at app.seqrets.app. The source code is available on GitHub for independent verification.