UNLOCKD
Subscription Capture — Privacy Policy
UNLOCKD Subscription Capture (the “extension”) is the companion to UNLOCKD (unlockdsubscriptionsvault.com), a subscription vault. This policy explains exactly what the extension handles and why. In short: the extension exists only to save a subscription’s login and plan into your own encrypted UNLOCKD vault, and it is built so that we cannot read your passwords.
What the extension accesses
- Login details you submit on a supported subscription site. When you submit a sign-up or login form on one of the ~130 subscription services UNLOCKD supports, the extension reads the email and password from that form so it can offer to save them. It only reads a form when you submit it, and only on those supported services — never on other websites.
- Your UNLOCKD account session. You sign in to your own UNLOCKD account inside the extension so it can save entries to your vault.
How your data is handled
- Passwords are encrypted on your device using a key derived from your master passphrase (PBKDF2 → AES-256-GCM) before they are stored. Only ciphertext is ever transmitted or saved. This is the same zero-knowledge model as the UNLOCKD app — we store ciphertext; you hold the key.
-
Your master key never leaves your device and is never written to disk.
It exists only in memory (
chrome.storage.session) and is cleared when you close the browser or lock/sign out. - Saved entries go only to your own vault, stored in UNLOCKD’s backend (Supabase), protected by per-user row-level security so only you can access your rows.
- Nothing happens without you. A captured sign-up is only saved after you open the popup and confirm it.
What we do not do
- We do not sell or rent your data to anyone.
- We do not share your data with third parties for advertising or any unrelated purpose.
- We do not use your data to determine creditworthiness or for lending.
- We cannot read your saved passwords — they are encrypted with a key we never receive.
- The extension runs no remote code; all logic ships in the package.
Your control
You can delete any saved subscription from the UNLOCKD app at any time, and you can remove the extension from your browser at any time. Deleting your UNLOCKD account removes your vault data.
Contact
Questions about this policy or your data: bradbrunton@gmail.com.