Privacy
Short, because there is little to say. DribbleVault has no server, no account and no analytics, so there is nothing to collect and nowhere to send it.
Last updated 3 September 2026 · applies to version 0.1.0
What we collect
Nothing.
Not your passwords, not your files, not your email address, not how often you open the app, not which features you use, not whether you opened it at all. There is no telemetry in the application and no analytics on this website.
Where your data lives
In one folder on your Mac, encrypted, under
~/Library/Application Support/com.dribblesoft.dribblevault. Nothing is
uploaded. There is no cloud copy, no sync and no backup we hold — if you want a backup, you
make one and you keep it.
The network
The application makes no network calls. Two optional features would, and both are off unless you switch them on:
Update checking (optional, off by default)
Asks vault.dribblesoft.com whether a newer version exists. It sends
nothing about you or your vault — no version, no identifier, no usage. What
that server learns is what any web server learns from any request: an IP address and a time.
It never downloads or installs anything. If there is an update, the app tells you and you fetch it yourself. An updater that downloads and runs code would be the most valuable thing to attack in a password manager, so there isn't one.
Breach checking (optional, off by default)
Sends the first 5 characters of a 40-character hash of a password to
api.pwnedpasswords.com, and compares the answers on your Mac. Thousands of
unrelated passwords share any given prefix, so the service learns that somebody asked about
one of roughly 800 possible hashes — not which password, not which account, and not whose
vault. Your password never leaves your Mac, and neither does its full hash.
If you buy a licence
Payment is handled by our payment provider, who acts as the merchant of record. They collect what a purchase requires — name, email, billing country for tax. We receive your name and email address, and use them for two things:
- issuing your licence, which carries your name so that it is uncomfortable to share
- replying if you write to support
That record is kept on a machine we control, not on a server. We do not sell it, share it, or add you to a mailing list you did not ask for. Ask us to delete it and we will — support@dribblesoft.com. Your licence keeps working; it does not depend on us holding anything.
This website
Static files. No cookies, no trackers, no analytics, no embedded fonts or scripts from anywhere else. Our host records ordinary server logs, which include IP addresses, as every web server does.
Children
DribbleVault is not directed at children and we knowingly collect nothing from anybody.
Changes
If this policy ever changes, the date at the top changes with it. If a change ever meant collecting something, it would be announced rather than quietly amended — but the design has no place to put collected data, which is the strongest guarantee available.
Contact
support@dribblesoft.com
Technology by Dribble Software Private Limited