ZeroKey/privacy.html at main · kdippan/ZeroKey · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
<!DOCTYPE html>
<html lang="en">
<head>
    <script async src="https://www.googletagmanager.com/gtag/js?id=G-SLS94VX99N"></script>
    <script>
      window.dataLayer = window.dataLayer || [];
      function gtag(){dataLayer.push(arguments);}
      gtag('js', new Date());
      gtag('config', 'G-SLS94VX99N');
    </script>

    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Privacy Policy | ZeroKey Vault</title>

    <meta name="description" content="Read ZeroKey's strict zero-tracking privacy policy. We cannot read your data, we do not hold your keys, and we do not track your identity.">
    <meta name="keywords" content="ZeroKey privacy policy, zero-tracking, end-to-end encryption privacy, secure messaging, data destruction">
    <meta name="author" content="Dippan Bhusal">
    <meta name="robots" content="index, follow">

    <meta property="og:type" content="website">
    <meta property="og:url" content="https://zerokey.vercel.app/privacy">
    <meta property="og:title" content="Privacy Policy | ZeroKey Vault">
    <meta property="og:description" content="Zero tracking. Zero knowledge. Read how we protect your fundamental right to privacy.">
    <meta property="og:image" content="https://zerokey.vercel.app/assets/og/privacy.png">

    <meta property="twitter:card" content="summary_large_image">
    <meta property="twitter:title" content="Privacy Policy | ZeroKey Vault">
    <meta property="twitter:description" content="Zero tracking. Zero knowledge. Read how we protect your fundamental right to privacy.">
    <meta property="twitter:image" content="https://zerokey.vercel.app/assets/og/privacy.png">

    <script type="application/ld+json">
    {
      "@context": "https://schema.org",
      "@type": "WebPage",
      "name": "ZeroKey Privacy Policy",
      "description": "The official privacy policy detailing data handling, encryption, and tracking policies for ZeroKey.",
      "url": "https://zerokey.vercel.app/privacy",
      "publisher": {
        "@type": "Organization",
        "name": "ZeroKey",
        "founder": {
          "@type": "Person",
          "name": "Dippan Bhusal",
          "url": "https://github.com/kdippan"
        }
      }
    }
    </script>

    <link rel="icon" type="image/x-icon" href="/assets/favicon.ico">
    <link rel="icon" type="image/svg+xml" href="/assets/favicon.svg">
    <link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon-16x16.png">
    <link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon-32x32.png">
    <link rel="icon" type="image/png" sizes="48x48" href="/assets/favicon-48x48.png">
    <link rel="icon" type="image/png" sizes="64x64" href="/assets/favicon-64x64.png">
    <link rel="icon" type="image/png" sizes="96x96" href="/assets/favicon-96x96.png">
    <link rel="icon" type="image/png" sizes="128x128" href="/assets/favicon-128x128.png">
    <link rel="apple-touch-icon" sizes="57x57" href="/assets/favicon-57x57.png">
    <link rel="apple-touch-icon" sizes="60x60" href="/assets/favicon-60x60.png">
    <link rel="apple-touch-icon" sizes="72x72" href="/assets/favicon-72x72.png">
    <link rel="apple-touch-icon" sizes="76x76" href="/assets/favicon-76x76.png">
    <link rel="apple-touch-icon" sizes="114x114" href="/assets/favicon-114x114.png">
    <link rel="apple-touch-icon" sizes="120x120" href="/assets/favicon-120x120.png">
    <link rel="apple-touch-icon" sizes="144x144" href="/assets/favicon-144x144.png">
    <link rel="apple-touch-icon" sizes="152x152" href="/assets/favicon-152x152.png">
    <link rel="apple-touch-icon" sizes="167x167" href="/assets/favicon-167x167.png">
    <link rel="apple-touch-icon" sizes="180x180" href="/assets/favicon-180x180.png">
    <link rel="icon" type="image/png" sizes="192x192" href="/assets/favicon-192x192.png">
    <link rel="icon" type="image/png" sizes="256x256" href="/assets/favicon-256x256.png">
    <link rel="icon" type="image/png" sizes="384x384" href="/assets/favicon-384x384.png">
    <link rel="icon" type="image/png" sizes="512x512" href="/assets/favicon-512x512.png">
    <link rel="manifest" href="/assets/site.webmanifest">
    <meta name="msapplication-TileColor" content="#0f172a">
    <meta name="msapplication-TileImage" content="/assets/favicon-144x144.png">

    <script src="https://cdn.tailwindcss.com"></script>
    <script src="https://unpkg.com/@phosphor-icons/web"></script>
    <link rel="stylesheet" href="/style.css">
</head>
<body class="bg-[#0f172a] text-slate-300 min-h-screen font-sans overflow-x-hidden relative selection:bg-blue-500/30 selection:text-blue-200 flex flex-col">

    <div class="fixed top-0 left-1/4 w-[500px] h-[500px] bg-blue-600/10 rounded-full blur-[150px] pointer-events-none z-0"></div>
    <div class="fixed bottom-0 right-1/4 w-[500px] h-[500px] bg-emerald-600/10 rounded-full blur-[150px] pointer-events-none z-0"></div>

    <nav class="relative z-10 border-b border-slate-800/50 bg-[#0f172a]/80 backdrop-blur-md sticky top-0">
        <div class="max-w-6xl mx-auto px-4 sm:px-6 lg:px-8 h-16 flex items-center justify-between">
            <div class="flex items-center gap-2 text-slate-100 font-bold text-2xl tracking-tight">
                <i class="ph ph-fingerprint text-blue-500"></i> ZeroKey
            </div>
            <div class="hidden md:flex gap-6 text-sm font-medium text-slate-400">
                <a href="/" class="hover:text-white transition-colors">Home</a>
                <a href="/about" class="hover:text-white transition-colors">About</a>
                <a href="/privacy" class="hover:text-white transition-colors text-slate-300">Privacy</a>
                <a href="/contact" class="hover:text-white transition-colors">Contact</a>
                <a href="/donate" class="hover:text-red-400 transition-colors flex items-center gap-1"><i class="ph-fill ph-heart text-red-500"></i> Support</a>
            </div>
            <a href="/encrypt" class="bg-blue-600 hover:bg-blue-500 text-white text-sm font-semibold px-5 py-2 rounded-lg transition-all shadow-[0_0_15px_rgba(37,99,235,0.3)] hover:shadow-[0_0_25px_rgba(37,99,235,0.5)]">
                Launch Vault
            </a>
        </div>
    </nav>

    <main class="relative z-10 flex-grow py-12 px-4 sm:px-6 lg:px-8">
        <article class="max-w-3xl mx-auto glass-panel p-6 md:p-12 rounded-2xl shadow-2xl border border-slate-700/50 bg-slate-900/60 backdrop-blur-md">

            <header class="mb-10 border-b border-slate-800 pb-8">
                <h1 class="text-3xl font-bold text-white mb-2 flex items-center gap-3">
                    <i class="ph ph-shield-warning text-emerald-400"></i> Privacy Policy
                </h1>
                <p class="text-xs text-slate-500 mb-6 font-mono">LAST UPDATED: MARCH 2026</p>

                <p class="text-slate-400 leading-relaxed text-lg">
                    Welcome to <strong>ZeroKey</strong>. Your privacy isn't just a feature of our service; it is the entire foundation. This policy explains what minimal data we collect and how we ensure your sensitive payloads remain completely unreadable to anyone but the intended recipient.
                </p>
            </header>

            <div class="space-y-10">
                <section>
                    <h2 class="text-xl font-semibold text-white mb-4 flex items-center gap-2">
                        <i class="ph ph-lock-key text-blue-400 text-2xl"></i> 1. Zero-Knowledge Architecture
                    </h2>
                    <p class="leading-relaxed mb-4 text-slate-400">
                        ZeroKey operates on a strict end-to-end encrypted (E2EE), zero-knowledge model.
                    </p>
                    <ul class="space-y-4 text-slate-400">
                        <li class="flex items-start gap-3 bg-slate-950/40 p-4 rounded-xl border border-slate-800/50">
                            <i class="ph ph-cpu text-emerald-400 text-xl mt-0.5"></i>
                            <div><strong class="text-slate-200">Your Payloads:</strong> All text and media files are encrypted locally on your device using AES-GCM encryption <em>before</em> they are ever sent to our servers.</div>
                        </li>
                        <li class="flex items-start gap-3 bg-slate-950/40 p-4 rounded-xl border border-slate-800/50">
                            <i class="ph ph-key text-emerald-400 text-xl mt-0.5"></i>
                            <div><strong class="text-slate-200">Your Keys:</strong> We do not generate, store, or have access to your decryption keys. The key is generated locally and embedded in the URL fragment, which standard web browsers never transmit over the network.</div>
                        </li>
                        <li class="flex items-start gap-3 bg-slate-950/40 p-4 rounded-xl border border-slate-800/50">
                            <i class="ph ph-eye-slash text-emerald-400 text-xl mt-0.5"></i>
                            <div><strong class="text-slate-200">The Result:</strong> We physically cannot read, scan, or monetize the contents of your messages or files. To us, your data is just random mathematical noise.</div>
                        </li>
                    </ul>
                </section>

                <section>
                    <h2 class="text-xl font-semibold text-white mb-4 flex items-center gap-2">
                        <i class="ph ph-trash text-blue-400 text-2xl"></i> 2. Data Retention & Destruction
                    </h2>
                    <ul class="space-y-4 text-slate-400">
                        <li class="flex items-start gap-3 bg-slate-950/40 p-4 rounded-xl border border-slate-800/50">
                            <i class="ph ph-fire text-red-400 text-xl mt-0.5"></i>
                            <div><strong class="text-slate-200">Burn-After-Reading:</strong> The exact moment a secure link is successfully opened and decrypted by the recipient, the encrypted text and associated media blobs are permanently and automatically deleted from our PostgreSQL database and storage buckets.</div>
                        </li>
                        <li class="flex items-start gap-3 bg-slate-950/40 p-4 rounded-xl border border-slate-800/50">
                            <i class="ph ph-hard-drives text-red-400 text-xl mt-0.5"></i>
                            <div><strong class="text-slate-200">No Backups:</strong> We do not keep historical backups of deleted payloads. Once a message is burned, it is permanently wiped from the server hardware.</div>
                        </li>
                    </ul>
                </section>

                <section>
                    <h2 class="text-xl font-semibold text-white mb-4 flex items-center gap-2">
                        <i class="ph ph-chart-line-up text-blue-400 text-2xl"></i> 3. Analytics & Tracking
                    </h2>
                    <p class="leading-relaxed mb-4 text-slate-400">
                        We believe in absolute minimal data collection. We do <strong>not</strong> use invasive tracking scripts, canvas fingerprinting, WebGL hardware rendering checks, or IP logging to monitor your behavior.
                    </p>
                    <div class="bg-slate-950/40 p-5 rounded-xl border border-slate-800/50">
                        <ul class="space-y-3 text-slate-400">
                            <li><strong class="text-slate-200">Google Analytics:</strong> We utilize Google Analytics strictly to monitor basic, anonymized website traffic (e.g., total daily visitors and general page views). This helps us maintain server capacity and ensure the site remains online.</li>
                            <li><strong class="text-slate-200">No Identity Linking:</strong> We do not use this analytics data to track individual user journeys or link identities to specific encrypted payloads.</li>
                        </ul>
                    </div>
                </section>

                <section>
                    <h2 class="text-xl font-semibold text-white mb-4 flex items-center gap-2">
                        <i class="ph ph-scales text-blue-400 text-2xl"></i> 4. Law Enforcement
                    </h2>
                    <div class="bg-slate-950/40 p-5 rounded-xl border border-slate-800/50">
                        <p class="leading-relaxed text-slate-400">
                            Because we utilize true end-to-end encryption and fundamentally do not possess the decryption keys, we cannot provide the plaintext contents of any message or file to law enforcement, government agencies, or third parties, even if legally compelled by subpoena to do so. We can only turn over the encrypted, unreadable blobs currently resting on the server, which are useless without the URL hash key.
                        </p>
                    </div>
                </section>
            </div>
        </article>
    </main>

    <footer class="border-t border-slate-800/50 bg-[#0f172a] relative z-10 pt-12 pb-8 mt-auto">
        <div class="max-w-6xl mx-auto px-4 sm:px-6 lg:px-8">
            <div class="flex flex-col md:flex-row justify-between items-center gap-6 mb-8">
                <div class="flex items-center gap-2 text-slate-100 font-bold text-xl tracking-tight">
                    <i class="ph ph-fingerprint text-slate-500"></i> ZeroKey
                </div>
                <div class="flex flex-wrap justify-center gap-6 text-sm font-medium text-slate-500">
                    <a href="/about" class="hover:text-blue-400 transition-colors">About</a>
                    <a href="/privacy" class="hover:text-blue-400 transition-colors text-slate-300">Privacy Policy</a>
                    <a href="/terms" class="hover:text-blue-400 transition-colors">Terms & Conditions</a>
                    <a href="/disclaimer" class="hover:text-blue-400 transition-colors">Disclaimer</a>
                    <a href="/cookie-policy" class="hover:text-blue-400 transition-colors">Cookie Policy</a>
                    <a href="/contact" class="hover:text-blue-400 transition-colors">Contact</a>
                    <a href="/donate" class="hover:text-red-400 transition-colors text-red-500/70">Donate</a>
                </div>
            </div>
            <div class="flex flex-col md:flex-row justify-between items-center text-xs text-slate-600 border-t border-slate-800/50 pt-6">
                <p>&copy; 2026 ZeroKey. All rights reserved.</p>
                <p class="mt-2 md:mt-0">Built for digital privacy by <a href="https://github.com/kdippan" target="_blank" rel="noopener noreferrer" class="text-blue-400 hover:text-blue-300 font-semibold transition-colors">Dippan Bhusal</a>.</p>
            </div>
        </div>
    </footer>

</body>
</html>