PRIVACY NOTE

Private by
architecture.

Vaultly is designed as a client-only authenticator. Secret keys are intended to stay inside the browser storage of your device. The production authenticator should not load advertising or analytics scripts.

What the landing page can load

Advertising can be placed on the public landing page, subject to the provider's policy. Keep the vault route free from third-party scripts. If a Worker is used, it should serve static assets and never receive secret keys.