We do not collect your data.
There is nowhere for it to go.
NovaBash runs entirely in your browser. There is no NovaBash account, no NovaBash server, and no NovaBash database. We do not collect, receive, or store your personal data, because there is no backend to send it to. Your vault stays on your own device.
This notice exists to be honest about the few edges that remain (mainly how the website itself is served) and to be clear that the data you put into NovaBash is yours and stays with you. Questions go to enquiries@aperintel.com.
Who we are
Aperintel, based in London, United Kingdom, makes NovaBash. Because NovaBash does not collect personal data through a service, there is no controller-to-data-subject relationship to manage here. The source code is public at github.com/aperintel/novabash, so you can verify everything below for yourself.
What we collect
Nothing on a NovaBash server, because there is not one. Your vault, the services and keys you add, and the audit log are encrypted in your browser and stored on your device. They are never transmitted to us. There is no sign-up, so we hold no email address, no profile, and no billing details.
Your passphrase is never stored and never leaves the page. We could not read your vault if we wanted to, and we do not want to.
The one honest edge: hosting
The website is a set of static files served by Cloudflare Pages. Like any web host or CDN, Cloudflare processes standard request information (such as your IP address, the file requested, and your browser user agent) in its own logs in order to deliver the page and protect against abuse. That happens at the hosting layer under Cloudflare's own terms. NovaBash neither controls nor receives those logs, and we add no analytics, no tracking pixels, and no third-party scripts on top of them.
No cookies, no tracking
We set no cookies. We run no analytics and load no third-party scripts. The only browser storage NovaBash uses is local storage and IndexedDB, which hold your encrypted vault on your device. See the cookie note for the short version.
Your data is yours, and it is local
Because everything lives on your device, you exercise control directly, without asking us:
- Export the encrypted vault to a file at any time, for backup or to move machines.
- Delete it instantly with the app's destroy action, or by clearing this site's data in your browser.
There is nothing held by us to request, correct, or erase. If you ever think otherwise, write to enquiries@aperintel.com and we will look into it.
Children
NovaBash is a developer tool and is not aimed at children. Since we collect no personal data from anyone, we hold none on children either.
Changes to this notice
If the product changes in a way that affects this notice, we update it and change the effective date at the top. The public source code is always the definitive record of what NovaBash actually does.
Privacy or security questions go to enquiries@aperintel.com, or open an issue on the public repository.
Pre-launch revision · independent legal review is part of our v1.0 release process.