On this page: What we collect, why we collect it, and how we use it.

Privacy Policy

We, the team behind the project https://hamsterpass.com, value your trust and are committed to protecting your privacy. HamsterPass is a software-as-a-service (SaaS) password manager — the only service we provide is storing and giving you access to your password entries and related information. In this privacy policy, we explain what data we collect, why we collect it, and how we use this information.

Information We Collect

We collect only what is needed to operate the Service:

  • Your email address, provided when you sign in — used to authenticate you (a one-time login code is sent to it) and to identify your account. We do not use passwords for account sign-in.
  • Billing information, if you purchase a paid subscription tier or feature — this is processed directly by our payment provider; HamsterPass does not receive or store your card details (see Appendix No. 1 to the Offer Agreement).
  • Anything you submit through a feedback form or when contacting our support.
  • The password entries you choose to store — see “Password Entries You Store” below, which explains why this content is treated differently from the data above.

Password Entries You Store

The password entries you create in HamsterPass — service name, username, password, URL, and notes — are encrypted (AES-256-GCM) before being written to our database. This protects that content if the underlying database were ever stolen, leaked, or accessed without authorization, and it is not read by us as part of routine operation, and never shared with any analytics or monitoring tool (see “Cookies and Technical Monitoring” below).

This does not make the content technically inaccessible to us outright — as the operator of the Service we retain the technical means to access it where necessary to run the Service or respond to a valid legal request, and that access is governed by our own internal controls, not solely by the encryption.

Your Content, Your Responsibility

Anything you type into a password entry — including a service name, username, URL, or note — is authored entirely by you; it is not information we ask for or collect as part of registering or using an account. You are solely responsible for the accuracy of that content and for having the right to store it, including if it happens to include personal data about someone other than yourself. By using the Service, you agree to indemnify and hold HamsterPass harmless from any claim, loss, or liability arising from content you choose to store. See also Section 9 of the User Agreement.

Use of Information

We use the collected information for the following purposes:

  • Providing access to the Service and ensuring it works correctly.
  • Processing payment for a paid subscription tier or feature, and confirming your purchase.
  • Contacting you about your account, a request you made, or important Service updates.
  • Improving the Service and developing new features.
  • Optimizing our website’s performance and providing you with the best user experience.
  • Complying with legal requirements and protecting the rights and interests of our company and our users.

Disclosure of Information to Third Parties

We do not sell, exchange, or transfer your personal information to third parties without your consent, except when it is necessary to provide our services or comply with the law.

Information Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction — including encrypting data in transit, and, for your password entries specifically, encrypting them at rest (see “Password Entries You Store” above). No method of electronic storage or transmission is completely secure, and we do not guarantee the Service will be free of security incidents; see Section 8 of the User Agreement for how liability for a security incident is handled.

By using our services, you agree to our privacy policy.

Updates to the Privacy Policy

We may update this privacy policy from time to time. Any changes will be published on this page, so we recommend checking it periodically. By continuing to use our services after changes are made, you confirm your agreement to the updated privacy policy.

Cookies and Technical Monitoring

Our website and service may use cookies and third-party monitoring or analytics tools, but only to keep the project working reliably — for example, to detect errors, measure uptime and performance, and understand basic technical usage patterns. Cookies are small text files stored on your device when you visit our site. You can manage your cookie preferences through your browser settings.

These tools are given only what they need for that technical purpose. We do not give any third party access to data that constitutes client confidentiality — including your stored password entries, usernames, or notes, which remain encrypted and are never shared with monitoring, analytics, or any other third-party service.

Using of this website implies your consent to the use of cookies in accordance with our privacy policy.

If you do not agree with the use of cookies, you can disable them in your browser settings, but this may affect the functionality of the site.

GDPR Compliance

We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring that your personal data is processed lawfully, fairly, and transparently. You have the right to access, correct, or delete your personal data at any time. If you wish to exercise these rights, please contact us using the contact information provided below.

Contacts

If you have any questions or suggestions regarding our privacy policy, feel free to contact us using the contact information provided on the relevant page - contacts.