NoPass

Privacy by architecture.

The web account stores only the data required for account access and billing. Vault content and passwords remain on the Mac.

Supabase Auth processes your email, authentication metadata and the session required to keep you signed in. Your profile may also include a display name and language preference.

For subscriptions, we store Stripe customer and subscription identifiers, plan, status, renewal date and cancellation state. Payment details are collected and processed by Stripe, not by NoPass.

We keep a technical billing-event ledger with the Stripe event identifier and type, processing status, timestamps and any processing error. This prevents duplicate handling and supports billing diagnostics.

When you add items, NoPass copies them and keeps the original to prevent accidental data loss.