Privacy policy

The short version

• Your vault is end-to-end encrypted. We can’t read your passwords, notes, site addresses or item names, and neither can anyone who breaks into our servers.
• AdPass never sees which sites you visit. Ad and tracker blocking happens on your device.
• If website icons are on, our own icon service sees the names of the sites it fetches logos for, but never your account or device.
• We collect a small amount of anonymous data to fix bugs and see which features get used. You can turn it off in Settings at any time.
• We don’t sell or share your data, show you ads, or take money to let ads through.

What we collect and why

The iPhone app

Ad blocking on iPhone needs no account and sends us nothing. When you turn on passwords, the app signs in to your AdPass account and syncs your vault, encrypted on your iPhone before it leaves, like the browser extension. It opens with Face ID, using a passkey that iOS keeps for getadpass.com, and your Recovery Code is the spare. The camera is used only to scan the code another device shows when you sign in, and nothing it sees is kept or sent. Apart from sync, the app sends us anonymous error reports, which you can turn off in Settings › Privacy. The AutoFill extension never sends anything.

So iOS can suggest your logins above the keyboard, AdPass gives it each login’s site and username, never the password. That list stays on your iPhone. The Safari blockers are lists of rules that Safari applies on its own; AdPass can’t see the pages they run on.

Error reports, exactly

An error report holds: which app and version, your browser family (for example “chrome”) or iOS version, which part of AdPass it came from, the type of error, the error message with anything that could identify you removed, and where in our code it happened.

Before it leaves your device we strip web addresses, site names, email addresses, IP addresses, anything in quotes, long codes and long numbers, and anything that points to a website’s own code. For the extension, web vault and website, our server checks and strips it again before passing it to Sentry, our error tracking service, so Sentry never sees your IP address. Error reports never include your passwords, vault contents, what you type, the pages you visit, or what’s on them.

Daily usage counts, exactly

Once a day the browser extension sends: its version, your browser family, whether you have a vault on this device (yes or no), roughly how long ago it was installed (in weeks: the first, second, third or fourth week, weeks 5 to 8, or longer), and how many times each AdPass feature was used that day (for example “filled a login 3 times”). The install date itself stays on your device. There is no install ID or user ID, so we can’t tell your counts apart from anyone else’s or link one day to the next. We only keep daily totals across everyone, and we keep the install-age totals apart from the version and browser totals. Nothing is counted while the setting is off.

Who processes data for us

• Cloudflare hosts the website, the waitlist and the service that receives error reports and usage counts, and provides Web Analytics.
• Microsoft Azure hosts the sync server and its database (encrypted vault data only).
• Sentry stores error reports, already stripped as described above.
• Resend sends our emails (sign-in codes, invites, security alerts and replies to your feedback).
• Linear holds feedback and problem reports as tasks for us to fix, without your email address.
• Apple and Google handle app installs, and payments once paid plans exist, under their own privacy policies.

How long we keep it

• Error reports: 30 days in Sentry.
• Daily usage counts: kept only as totals across everyone, which can’t be tied to anyone.
• Waitlist: deleted after the public launch, or as soon as you leave it.
• Feedback reports: until the issue is closed. Your reply address: until we tell you it’s fixed, or 180 days at most.
• Website icons: cached by a one-way hash of the site name for up to 30 days, never tied to anyone.
• Earlier versions of vault items: 30 days after you change or delete them, encrypted like the rest, so you can restore them.
• Account data: until you delete your account. It’s deleted 7 days after you ask (so you can change your mind), and drops out of our database backups a week after that.

The browser extension and its store

To block ads and fill your passwords, the browser extension asks your browser for access to the pages you open. It uses that access on your device only: it doesn’t send us the addresses or contents of the pages you visit. It can also change what you’ve copied, so a password you copy from AdPass is wiped from your clipboard after 30 seconds. It never reads your clipboard.

AdPass’s use of information received from the browser extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We use it only to provide and improve the AdPass features described on this page. We never sell it, never use or pass it on for advertising, and never use it to decide anyone’s creditworthiness. No one at AdPass reads it, except a report you choose to send us, when needed for security, or when the law requires it. The same applies wherever else the extension is offered.

Your choices

You can turn off error reports and usage counts in Settings at any time. Take a copy of your vault whenever you like with Settings › Export your vault, on any plan: an encrypted AdPass backup, or a CSV for moving to another app. To delete your account and everything we store for it, use Settings › Delete account in the extension or web vault. Every other device is signed out straight away, and after 7 days your vault, devices and passkeys are deleted and we forget your email address everywhere, including the waitlist and feedback replies. Can’t sign in? Email [email protected] from the address on your account and we’ll delete it within 30 days.

AdPass isn’t meant for children under 13, and we don’t knowingly collect their data. If this policy changes, we’ll update the date at the top, and tell you in the app or by email before any change to what we collect.