Privacy Policy

Last updated: 30 October 2026

Passhold keeps your passwords, passkeys, cards, addresses and notes encrypted on your computer. When you sign in to a Keyrook account they sync: each item is encrypted on your device before it is uploaded, with a key the server never receives. We store it, but we cannot read it. We keep your email address and what is needed to run the account, use it for nothing else, and sell nothing. Passhold has no analytics, no advertising and no tracking.

Passhold is made by BRICK IT ALL LLC ("we"), under the Keyrook brand. Your Keyrook account is shared by every Keyrook app and has its own privacy policy, at https://account.keyrook.com/privacy/. That policy says what the account holds, who processes it for us, which emails we send and how long everything is kept. This one says what Passhold does, and what it adds.

On your computer

What Passhold stores

• Your vault — logins (a name, a username, a password, the websites it is for, notes, its earlier passwords and a website's passkey if it has one), payment cards, addresses, notes, fields you add, folders and the trash. All of it is encrypted with AES-256-GCM before it is written to disk.
• What opens the vault — the vault's key, itself encrypted, under your password or a recovery key; and, if you set them up, under a key that only a passkey on your device or your security key can produce. Neither we nor Passhold ever receive your fingerprint, your face or your device's PIN: your device checks them and answers yes or no. A PIN set in Passhold protects a copy of the key held only in your browser's memory, which is gone when the browser closes.
• Your preferences — theme, language, auto-lock delay, and the sites you told Passhold never to offer saving on.
• When to ask you for a rating — the day Passhold first filled something, how many times it has filled since, and whether you answered. Nothing about your logins, the sites or your account, and it is never sent anywhere.
• While the vault is unlocked, its key is in your browser's session memory, which web pages and other extensions cannot reach.

What Passhold can see on the pages you visit

To put its button in a sign-in field, fill it, and offer to save what you type, Passhold runs a small script in the web pages you open. This is why the browser says at install that it can read and change your data on all websites.

• It looks at the page's forms to find fields for a username, a password, a card or an address. It does not read or keep the rest of a page.
• When you send a sign-in or a checkout, it notices what you typed in those fields so that Passhold can offer to save it. Until you answer, that stays in your browser's session memory. It is saved in your encrypted vault if you say yes, and it is discarded if you do not. Card details are never picked up from a page that is not on https.
• When a website asks for a passkey, Passhold answers on your computer if you choose one it keeps. The website receives a signature, never the key.
• The script holds nothing. It never sees your vault. It receives a login only to fill its own page, after you choose it. The list you choose from is drawn by Passhold in a frame the web page cannot read.
• It stays out of the pages that check whether you are a person (Cloudflare, reCAPTCHA, hCaptcha). Its passkey scripts stay out of account.keyrook.com.

None of this leaves your computer except as a sealed item in your vault, as described below.

With your Keyrook account

Passhold starts with a Keyrook account, made with an email address or with Google or GitHub. Everything the account itself holds is in the account's privacy policy. It includes your email address and, if you sign in with Google or GitHub, the identifier they give your account. We use that answer once to sign you in and keep no access token. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What Passhold sends

Passhold connects to one address, the Keyrook account's server, and only while you are signed in. That is enforced by the extension's Content Security Policy. Signed out, it sends nothing.

• Your items, encrypted. Each item is encrypted on your device with a key that is Passhold's own, drawn from your account, before it is uploaded. We store the ciphertext and what is needed to keep your computers in step: a random identifier for each item, a revision number, when it last changed, whether it was deleted, and whether it is a login or one of your cards, addresses and notes. So we can tell how many items you have and when they change. We cannot read a password, a name, a website, a card number, a note or a folder's name.
• Which version is asking. Every request names the app and its version.

A family's shared vaults

Keyrook families are not offered yet. When they are, an organiser makes and runs a family on account.keyrook.com, and Passhold shares vaults in it. Items in a shared vault are encrypted on your device, with keys the server never receives, and everyone in the family can read them. Whatever they have read cannot be taken back from them, even once they leave. We learn who is in a family, how many items a shared vault holds and when they change, never what they are or the vault's name. What the family itself holds is in the account's privacy policy.

What Passhold never does

• No analytics, telemetry, crash reporting or usage statistics.
• No advertising and no advertising identifiers.
• No remotely hosted code. Everything that runs is in the package your browser installed.
• No favicons or logos fetched from the internet. The marks beside your logins are built in, so no server learns which sites you have accounts on.
• No breach checks against an online service, for the same reason. The checkup of your passwords is worked out on your computer.

"Change" in the checkup opens the website's own page for changing a password, in a new tab. That is a visit you choose, and the website sees it as it would any other.

Data you export yourself

Backups and exports are made on your computer and go only where you save them. A backup is encrypted. A CSV export is not: it holds your passwords in plain text, and anyone who gets the file can read them. Delete it as soon as you have finished with it, and delete a CSV file once you have imported it.

Your choices and rights

• See and take your data. Everything is readable by you in Passhold, and you can export it. For what we hold about your account, write to us.
• Remove it from one computer. Signing out syncs once more, then removes the vault from that browser. It does nothing if an item has not reached your account yet. Removing the extension also removes its storage.
• Delete it everywhere. Deleting your account on account.keyrook.com removes your email address and everything synced from our database, for every Keyrook app. Encrypted backups expire as the account's privacy policy describes.
• Correct it or ask about it. Write to us. We answer within 30 days.

By creating an account you agree to this processing, for the purpose of providing Passhold and keeping it secure. You can withdraw by deleting the account. If you believe we handle your data wrongly, you may also complain to the data protection authority where you live.

We do not sell your data, use it for advertising, or use it to decide anyone's creditworthiness. Nobody at BRICK IT ALL LLC reads your vault, because nobody can.

Passhold is not directed at children under 13, and we do not knowingly hold data about them.

Changes

When this policy changes, the date at the top changes with it. A change in what we collect or who processes it is also named in the release notes before it takes effect.

Contact

BRICK IT ALL LLC — brickitall.hi@gmail.com