What we do with your data
You trust us with what is most personal to you. Here is exactly how it is protected, in plain language.
Encrypted before it is stored
Your confidential information (account numbers, codes) is encrypted with AES-256-GCM on our servers, before it enters the database. The key never leaves the server and is never sent to your browser. In practice: even someone who obtained a copy of the database would read nothing but unreadable characters.
Partitioned in the database
Every row of data carries the name of its owner, and the database itself refuses to serve another user's data. This barrier does not depend on the application code: it holds even if the application has a bug.
Your heirs see only what they need
Confidential information lives in a separate table, reserved for you alone. An heir you invited sees the belongings you share, and nothing else: not your accounts, not your codes, not the other heirs' tokens before the calculation.
Invitations that cannot be reused
Each invitation rests on a 256-bit secret, single use, expiring after thirty days, which you can revoke. The four-digit code is passed on out loud: two different channels, so that an intercepted link is never enough.
The browser locked down
We enforce a strict content security policy: the site refuses to run a script from anywhere else, refuses to be displayed in a hidden frame on another site, and only allows connections to our own servers. The connection is encrypted end to end and forced to HTTPS.
Your rights, in two clicks
You export all of your data whenever you want, and you delete your account permanently without having to write to anyone. We sell nothing, we track nobody for advertising, and we do not use your data to train models.