YOUR PRIVACY.
What we save.
The workspace stores your account’s public-key fingerprint, sessions, signed recovery bundles, policy history and action receipts. Connected bundles include policy settings, public verification keys and retrieval locations. It does not receive your key passphrases or private signing keys.
Your keys stay with you.
Your browser encrypts your account-key backup before saving it locally. Policy signing happens on your device. Keep an independent copy of your encrypted key and passphrase: Paranoid cannot reset it.
Hosting and authentication.
Sign-in uses a one-time challenge signed by your device. Session cookies are restricted to this site. The application adds no marketing analytics, third-party fonts or session replay. Hosting infrastructure may retain connection logs.
What the network receives.
Signed policy actions go to the arrangement’s enrolled network. The current protocol carries policy and operational metadata; it is not anonymous. Private payloads and recipient decryption keys are not sent through the workspace.