Privacy Policy
Effective November 3, 2026
Who we are
MyLockCode (mylockcode.com) is a free service run by an independent developer. Contact: hello@mylockcode.com.
What we collect
- Your email address. If you sign in with Google or Apple, also the name and profile picture that provider shares.
- The locks you save: name, combination, note and color. The name, combination and note are encrypted with AES-256-GCM before they're stored on the server.
- A sign-in session cookie and a language cookie.
- Server logs kept by our hosting provider, such as IP address and browser type, for security and troubleshooting.
We don't use advertising or analytics trackers.
Why we use it
- To sign you in and keep you signed in.
- To store your locks and show them to you on any device.
- To send one-time sign-in codes by email.
- To keep the service secure, for example by limiting how many codes can be requested.
Who processes it
These providers process data on our behalf. Their servers may be outside your country, including in the United States.
- Vercel: hosting
- Turso: database
- Resend: sign-in emails
- Google and Apple: sign-in, only if you choose them
We don't sell your data or share it for advertising.
On your device
After you open your vault, a copy of your last-synced locks is kept in your browser so it works offline. This copy is not encrypted by the app. Signing out removes it.
How long we keep it
We keep your data while your account exists. Deleting a lock removes it immediately. Sign-in codes expire after 10 minutes.
To delete your account and everything in it, email hello@mylockcode.com from the address you sign in with. We'll delete it within 30 days.
Your rights
You can ask to see, correct or delete your data at any time by emailing hello@mylockcode.com.
Children
MyLockCode isn't directed at children under 14.
Changes
If this policy changes, we'll update this page and the date above.