What we collect
Nothing.
Not your passwords, not your files, not your email address, not how often you open the app, not which features you use, not whether you opened it at all. There is no telemetry in the application and no analytics on these pages.
Where your data lives
In one folder on your Mac, encrypted, under ~/Library/Application Support/com.dribblesoft.dribblevault. Nothing is uploaded. There is no cloud copy, no sync and no backup we hold — if you want a backup, you make one and you keep it.
The network
The application makes no network calls. Two optional features would, and both are off unless you switch them on:
Update checking (optional, off by default)
Asks vault.dribblesoft.com whether a newer version exists. It sends nothing about you or your vault — no version, no identifier, no usage. What that server learns is what any web server learns from any request: an IP address and a time.
It never downloads or installs anything. If there is an update, the app tells you and you fetch it yourself. An updater that downloads and runs code would be the most valuable thing to attack in a password manager, so there isn’t one.
Breach checking (optional, off by default)
Sends the first 5 characters of a 40-character hash of a password to api.pwnedpasswords.com, and compares the answers on your Mac. Thousands of unrelated passwords share any given prefix, so the service learns that somebody asked about one of roughly 800 possible hashes — not which password, not which account, and not whose vault. Your password never leaves your Mac, and neither does its full hash.
If you buy a licence
Payment is handled by our payment provider, who acts as the merchant of record. They collect what a purchase requires — name, email, billing country for tax. We receive your name and email address, and use them for two things:
- issuing your licence, which carries your name so that it is uncomfortable to share
- replying if you write to support
That record is kept on a machine we control, not on a server. We do not sell it, share it, or add you to a mailing list you did not ask for. Ask us to delete it and we will — support@dribblesoft.com. Your licence keeps working; it does not depend on us holding anything.
These pages
The DribbleVault pages on dribblesoft.com are static files. No cookies, no trackers, no analytics, no embedded fonts or scripts from anywhere else. Our host records ordinary server logs, which include IP addresses, as every web server does. Other parts of dribblesoft.com are covered by the Dribble Software privacy policy.
Children
DribbleVault is not directed at children and we knowingly collect nothing from anybody.
Changes
If this policy ever changes, the date at the top changes with it. If a change ever meant collecting something, it would be announced rather than quietly amended — but the design has no place to put collected data, which is the strongest guarantee available.
Contact
support@dribblesoft.com
Technology by Dribble Software Private Limited