8PWD8PWD 2026 Privacy Policy
1. Summary
We collect no personal data. 8PWD 2026 runs entirely on your device, contains no networking code of its own, and contains no analytics, advertising, crash reporting or third-party tracking components.
2. What we collect
Nothing. 8PWD 2026 transmits no data to MNV LIMITED — not your vault contents, not usage patterns, not device identifiers, not diagnostics.
3. Where your data is stored
3.1 Everything you create in 8PWD 2026 is stored in a local database on your device, encrypted with AES-256-GCM under a key kept in that device's system Keychain and, once you set one, protected by your master password and recovery phrase; the database is additionally covered by iOS, iPadOS or macOS device encryption. iPhone, iPad and Mac each keep their own local database and do not sync; data moves between them only through backup files you export and import yourself.
3.2 Backup files you export are stored wherever you choose to put them (the Files app, iCloud Drive, or any destination you share to), and may optionally be encrypted. Privacy and security at those destinations are governed by those providers' terms and are outside our control.
3.3 The following are likewise stored only in that local database and never leave your device: Wi-Fi passwords (encrypted like every other password); the sign-in log (time, method and device type of each unlock — no location, no identifiers); security score snapshots (one score per month, used to draw the trend); and members (local labels you create; they correspond to no online account). You can clear the sign-in log inside the app at any time.
3.4 Clipboard. A password you copy is cleared automatically after 30 seconds. On iPhone and iPad it stays in the local clipboard and is not synced to other Apple devices through Universal Clipboard. macOS has no such switch: we mark the copy with the "concealed" flag that clipboard managers honour (so they don't record it), but if you have Universal Clipboard turned on, it may appear on other devices signed in to the same Apple ID during those 30 seconds.
4. Permissions
4.1 Camera — used only to scan two-factor and Wi-Fi QR codes. Images are decoded on device and are neither stored nor uploaded. 4.2 Face ID / Touch ID — used only for on-device unlocking. Biometric data is managed by iOS, iPadOS or macOS; 8PWD 2026 never touches and cannot read it. 4.3 Notifications — used only for local password rotation reminders, which contain no passwords.
5. About our website
5.1 Everything above is about the application. www.8pwd.com is a separate thing, and to be accurate about it: like any web server, it writes standard access logs, which include IP addresses, the page requested, the time, and the browser's user-agent string.
5.2 Those logs are used only to keep the site running and to investigate faults. They are not used to build a profile of you and are not shared with anyone. The site sets no cookies, loads no third-party resources into its pages, and runs no JavaScript at all.
5.3 The site is served through Cloudflare, Inc., which acts as our content delivery network and reverse proxy. Cloudflare terminates the HTTPS connection and therefore processes visitors' IP addresses and request metadata, under its own privacy policy; your browser may also send Cloudflare automatic reports about network errors it encounters on the site. We use it for certificate management and protection against denial-of-service attacks.
5.4 The application never contacts that website; no data passes between them. Nothing described in this section touches the contents of your vault.
6. Apple's role
When you download through the App Store, or buy 8PWD 2026 Pro inside the app, payment and purchase status are handled by Apple's StoreKit and Apple may collect data under its own privacy policy; we receive neither your payment details nor your transaction records. That is outside our control and unrelated to the 8PWD 2026 application itself.
7. Children
8PWD 2026 is not directed at children under 13. We collect no data from anyone, children included.
8. Your rights
8.1 Because we hold none of your data, requests under privacy laws to access, correct, delete, port, or opt out of sale cannot be actioned by us — not as a refusal, but because there is genuinely nothing on our side.
8.2 You can delete your data in the app at any time, or delete 8PWD 2026 to remove everything from your device. Note that deleting the app also deletes the local database, so confirm you have a backup first.
9. Legal position
9.1 For the purposes of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486), MNV LIMITED is not a "data user" in respect of your vault data, because that data never leaves your device and is never held or controlled by us.
9.2 For the same reason we are neither a "controller" nor a "processor" under the GDPR, nor a "business" or "service provider" under US state privacy laws such as the CCPA/CPRA.
10. Changes
Updates to this policy will be published in the application and at www.8pwd.com, and material changes will require your acceptance again.
11. Contact
MNV LIMITED (incorporated in the Hong Kong Special Administrative Region) Business Registration No. 74044496 [email protected] www.8pwd.com
This text is generated from the same source as the copy shown inside the app, so the two cannot drift apart.