Cookie Policy

Last updated: September 25, 2026

Effective date: September 25, 2026

What this policy covers

This policy explains storage used by the Passary website and optional web app. The current Passary application code does not set cookies for analytics, advertising, or behavioral tracking. It does use browser storage to remember a few choices and, if you use the web app, to keep your vault and support offline use.

The Windows desktop app does not use website cookies; it stores its vault and app state separately on your PC. Browser extensions also have their own storage. See our Privacy Policy for broader information about data processing, optional integrations, and website visits.

Cookies and browser storage are different

Cookies can be attached automatically to matching web requests. Local storage, session storage, IndexedDB, and Cache Storage stay in the browser and are not automatically attached to every request. The web app can still use stored data when you choose features that communicate with a service, such as a configured sync destination or an optional breach check.

We found no cookie-setting code in the current Passary website or web app. A hosting provider, CDN, or other infrastructure outside this codebase may have its own connection logs or response behavior; this code audit does not establish what every deployed intermediary sets. Browser developer tools can show the cookies and other site data actually present for your visit.

What Passary stores in your browser

TechnologyUseTypical retention
Local storagepassary_cookie_consent records that you dismissed the storage notice. passary_autoLockMinutes and passary_rowDensity remember your vault display and auto-lock choices.Remains until you or the browser clears this site's data.
Session storagepassary_autoLocked remembers an auto-lock event and passary_generator_settings keeps password-generator choices for the tab.Normally removed when the tab or browser session ends.
IndexedDBThe web app stores encrypted vault records and recovery data, local snapshots, and some unencrypted operational metadata. Separate databases can hold device identity, chosen backup-folder handles, and local sync state.Remains until removed by you, the app, or the browser; browsers can also evict site data.
Cache StorageA service worker caches the web app's unlock page so the app can reopen offline after an initial online load.Updated by the service worker; removed when you clear this site's data or the browser evicts it.

The listed keys describe the current web app, not a guarantee that browser storage will always remain available. Storage quotas, private browsing, browser cleanup settings, and device pressure can change how long data survives. The local vault database also contains listing and operational fields that are not encrypted vault contents.

The storage notice is not a tracking opt-in

Selecting “I Understand” on our notice saves passary_cookie_consent so the notice stays dismissed. Despite that legacy key name, this is an acknowledgment of essential browser storage, not consent to analytics or advertising. There is no tracking-cookie category to enable on this page. You can reset the acknowledgment below; doing so only brings the notice back.

Rules on accessing or storing information on a device can apply to cookies and similar browser storage. The ePrivacy rules have an exception for storage strictly necessary to provide a service you request. Not every preference is automatically “strictly necessary,” and this policy does not treat clicking the notice as a blanket consent for future storage. If we introduce storage that requires consent, we will provide a separate choice before using it.

Managing or deleting site data

Your browser's privacy or site-data settings let you inspect and clear data for passary.com. Blocking storage can prevent the web vault and offline page from working. Session storage normally ends with the tab or browser session; persistent storage can also disappear through browser eviction or cleanup.

Back up before clearing site data. Removing Passary's browser data may erase the only local copy of a web vault, recovery material, snapshots, device keys, and saved folder access. Export and verify an independent encrypted backup first. Clearing website data does not necessarily remove a Windows vault file, extension storage, or copies at a sync destination you configured.

Third-party and network activity

We do not integrate advertising pixels or website analytics in the current application code. Optional features may contact services you choose, including sync providers; an optional compromised-password check can make a network request. Those requests are not tracking cookies, but they may involve data processing by the destination. See the Privacy Policy and feature-specific disclosures for details. This policy does not cover cookies on external sites you visit through a link.

Changes and contact

We will update the date above when this policy changes and provide an appropriate additional notice for material changes. Questions about browser storage can be sent to privacy@passary.com. Passary is based in Budapest, Hungary.

Storage notice

Passary uses browser storage for the web vault and your choices. This notice does not offer an analytics or advertising opt-in because the current application does not use those cookies.

This removes only the notice acknowledgment. It does not clear your vault or other browser storage.