See exactly how we protect your files

No hand-waving, no "trust us." Here is the real pipeline, the algorithms, and what we can and cannot see.

Privacy by architecture, not by promise

Privatt is built so that, when you hold a key, we cannot read your data. Your keys are derived and used on your device, we store only ciphertext, and the one mode where we do hold the key says so plainly before you choose it.

  • Keys derived and used on your device
  • We store ciphertext, never your plaintext
  • Canadian jurisdiction, Law 25-first

How your files are encrypted

In customer-held key modes, your files are encrypted on your device before they leave it, and decrypted back to plaintext only there. We never receive a key or a readable file.

  1. 1

    Your passphrase becomes a key

    A passphrase only you know is stretched into an encryption key with Argon2id, a memory-hard function built to make brute-force guessing slow and expensive. Your passphrase never leaves your device.

  2. 2

    Every file is sealed on your device

    Each file is encrypted in your browser with XChaCha20-Poly1305, a modern authenticated cipher. Files are sealed in streamed chunks, so large uploads never need a plaintext copy and any tampering is caught before anything is decrypted.

  3. 3

    Only ciphertext leaves your device

    Your keys are protected by a master key that is itself encrypted before it is stored. Whether files land in your own Google Drive or OneDrive or in Privatt storage, what we and your cloud provider hold is unreadable ciphertext.

  4. 4

    Decryption happens only for you

    Your files reach plaintext only on your device, in a background worker, and key material is wiped from memory when it is done. No one (not Privatt, not your cloud provider) can read your files along the way.

Choose who holds the keys

Every vault is encrypted. You decide who can open it: only you, only with Privatt, or both. Switch anytime.

Most private

Your devices only

Your key comes from a passphrase only you know, so Privatt can never read your vault. You enter your passphrase on each device and keep a one-time recovery key.

Easiest

Managed by Privatt

We hold your key, so you sign in from any device with nothing extra to remember and no risk of locking yourself out. Because we hold the key, Privatt can read your files (and scan them for malware); this option isn't zero-knowledge.

Not sure? Pick the Two-key vault. Nobody can read your files without your key, and you can switch modes anytime in Settings.

What Privatt can and cannot see

With a customer-held key mode (Your devices only or Two-key vault), here is the honest breakdown.

What we can never see

  • The contents of your files
  • Your passphrase
  • Your recovery key
  • Anything you type into an encrypted note

What we see, to run your account

  • Your email address and plan
  • Technical metadata, such as how much you store and when files change
  • Which cloud you connect (Google Drive, OneDrive, or Privatt storage)

The exception is Managed by Privatt mode, which you choose deliberately: to sign in anywhere with nothing to remember and let us scan files for malware, Privatt holds the key and briefly handles your files as readable data. It is a convenience trade-off, it is not zero-knowledge, and we tell you before you turn it on.

The details, for the technically curious

We use standard, well-reviewed cryptography rather than anything we invented ourselves.

Cryptography library
libsodium, the widely used, independently audited library that underpins password managers, messengers, and other security tools. We don't roll our own crypto.
Key derivation
Argon2id with a per-vault random salt: memory-hard, to resist brute-force and GPU attacks on your passphrase.
File & note encryption
XChaCha20-Poly1305 authenticated encryption (libsodium secretstream), applied in chunks with per-chunk authentication so truncation or tampering is caught.
Managed-mode encryption
AES-256-GCM on our servers: the sole encryption in Managed by Privatt mode (where we hold the key, so that mode is not zero-knowledge), and an added outer layer in Two-key vault mode, wrapping your already-encrypted file so our key alone still cannot reach your plaintext.
Key protection
Envelope encryption: a random root key protects your data and is itself wrapped by your passphrase key, your recovery key, and a non-extractable device key, so a stored key is useless on its own.
Where encryption runs
In your browser, in a background worker, for every customer-held key operation. Key material is zeroed from memory after use.

Our encryption envelopes are versioned, so we can adopt stronger algorithms over time without leaving your existing data behind.

Straight answers

The questions worth asking before you trust anyone with your files.

What happens if I forget my passphrase?

When you set up a customer-held key vault, you save a one-time recovery key. That key is the way back in. If you lose both your passphrase and your recovery key, no one can restore your data, not even us. That is the direct cost of a vault only you can open, and we would rather be honest about it than pretend otherwise.

Can Privatt reset my password and get me back into my files?

For customer-held key modes, no. We never hold your key, so there is nothing on our side to unlock your vault with. Your recovery key is the only fallback. (In Managed by Privatt mode we do hold the key, which is exactly the trade-off that mode makes.)

What happens to my files if I cancel or Privatt shuts down?

Your files are yours. If they live in your own Google Drive or OneDrive, they stay right where they are. You can export your data at any time and disconnect whenever you like. Nothing is locked to us.

How is this different from a password-protected zip?

A zip password is usually a fast hash an attacker can guess billions of times per second, with no tamper protection. Privatt derives keys with memory-hard Argon2id, encrypts each file with authenticated encryption that detects tampering, and works across all your devices while keeping the key with you.

Is my file's content ever on your servers in readable form?

In customer-held key modes, no: files are encrypted before they leave your device and we only ever store ciphertext. In Managed by Privatt mode, files are briefly readable on our servers so we can scan them for malware, which is why that mode is labelled as not zero-knowledge.

Do you mine, profile, or sell my data?

No. We collect only what we need to run your account, and we never mine, profile, or sell the files you store. In customer-held key modes we couldn't read them even if we wanted to.

Beyond your files: Send

The same client-side cryptography that protects your vault also powers Send, our way to send confidential information to anyone.

  • End-to-end encrypted in every mode, including Managed by Privatt: the message is encrypted in your browser and decrypted only in the recipient's browser.
  • The recipient's passphrase never reaches Privatt, so a leaked link alone gives an attacker nothing to test guesses against.
  • Every message expires on a schedule you choose, can carry a view limit, and can be revoked at any time.
See how Send works

See it for yourself

Create your encrypted vault in minutes and choose exactly who holds the keys.