Privacy Policy

Effective: 20 April 2026  ·  Last updated: 20 April 2026

1. Who We Are

AgentVault is a Chrome browser extension developed and maintained by Dennis Price, trading individually (“we”, “us”, “our”). Website: getagentvault.app.

2. Data We Do Not Collect

We do not collect, transmit, store remotely, or sell:

• Your name, email address, or any personal identifier
• The skills or SKILLS.md files you import
• The secrets, API keys, tokens, or passwords you store in the Vault
• Your browsing activity, tabs, or visited URLs
• Usage analytics or crash reports

3. Data Stored Locally on Your Device

AgentVault uses Chrome storage APIs that store data exclusively on your local device:

• chrome.storage.local — your skill library, vault configuration (salt, canary token, encrypted secrets), and license tier. Persists until you uninstall the extension or manually clear it.
• chrome.storage.session — temporarily holds decrypted secrets during an active Agent Session. Automatically cleared when the browser closes or after 15 minutes.

Vault secrets are encrypted with AES-256-GCM using a key derived from your master password via PBKDF2 (100,000 iterations, SHA-256). Your master password is never stored — only the derived key is held in memory while the vault is unlocked.

4. External Network Requests

The extension makes network requests only when you explicitly initiate a GitHub skill import. In that case, it fetches the raw file from raw.githubusercontent.com or queries api.github.com. No credentials or personal data are included in those requests.

5. Agent Session Messaging

The Grant Agent Session feature allows locally-running AI agents to request secrets via Chrome’s messaging API (chrome.runtime.sendMessage). This communication occurs entirely on your local machine between localhost processes and the extension. No data leaves your device via this feature.

6. Pro License & Payments

Pro subscription payments are processed by Paddle.com as Merchant of Record. Paddle’s privacy policy governs data collected during checkout. We receive only a license key and subscription status — no payment card details.

7. Cookies & Tracking

This website does not use cookies, tracking pixels, or third-party analytics of any kind.

8. Children’s Privacy

AgentVault is not directed at children under 13. We do not knowingly collect any information from children.

9. Changes to This Policy

We may update this policy periodically. Material changes will be noted with an updated effective date. Continued use of the extension after any changes constitutes acceptance of the revised policy.

10. Contact

Questions about this policy? Reach us here: