PACVAULT · BROWSER EXTENSION

Privacy, clearly.

This notice explains the PacVault extension's collection and use of data in Chrome, Microsoft Edge, and compatible Chromium browsers.

Last updated: October 22, 2026

What the extension accesses

• Account identity: when you sign in, Pactuno returns the account identifier and basic profile details needed to show which account is connected. Google or email sign-in is handled through Pactuno's sign-in flow.
• Encrypted vault: passwords, usernames, notes, and files you choose to add are encrypted in the extension with your vault passphrase before the encrypted envelope is synced to Pactuno. The extension does not send your passphrase or decrypted vault entries to Pactuno.
• Website login fields: only after you grant access to a specific HTTPS website or explicitly enable detection across HTTPS websites, PacVault can identify login fields to display its P1 control. After a form submission, login-button click, or Enter in a login field on an approved site, it may stage a possible login draft in temporary browser-session storage. A visible prompt offers review; you must confirm saving or updating the login before the entry is encrypted and synced.
• Autofill: after you select a saved login, the extension fills the matching fields on that same website origin. It never submits the form.

What is stored locally and remotely

• The encrypted vault envelope and revision are stored in the browser's extension storage and synced to Pactuno over HTTPS.
• A short-lived sign-in token is held in browser-session extension storage. Signing out revokes that device grant. Unreviewed login drafts are temporary and expire after 10 minutes.
• The master passphrase is used only during unlock and is not retained. Derived encryption keys are held in trusted, memory-only browser-session storage so closing the popup does not lock the vault. Lock, sign out, account-session expiry, browser restart, extension reload or disabling the extension clears this unlocked state. Decrypted entries exist only in extension memory while in use.
• Pactuno's service stores the encrypted envelope and account/revision metadata needed to authenticate and sync it. Infrastructure providers process requests to operate the service.

Your choices and controls

• Sign-in, sync, website access, saving a detected login, and autofill are user initiated.
• Website access is optional: approve individual HTTPS sites or opt into detection across HTTPS websites through the browser permission prompt. Disable P1 on a website to exclude it; turn off broad detection to remove the broad permission. Reload open website tabs after changing access.
• Use Sign out to revoke the extension's device session. Delete saved items from the unlocked vault; uninstalling the extension removes its local browser data.
• Files stored in PacVault are limited to 1 MB each.

Sharing and analytics

We do not sell vault data or use it for advertising. The extension does not include advertising or analytics. Account authorization and encrypted sync requests go to Pactuno; your chosen identity provider (Google or email) processes sign-in according to its own privacy terms. We do not disclose decrypted vault contents to Pactuno through the extension.

Security and retention

Data is transmitted to Pactuno over HTTPS. The vault uses client-side encryption; keep your passphrase and recovery key safe. The encrypted cloud envelope remains until it is replaced or your account data is deleted. Extension session tokens expire, and temporary detected-login drafts expire after 10 minutes. Contact us for account data or deletion requests.

Chrome Web Store Limited Use

The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Contact

Questions, privacy requests, or security reports: support@pactuno.online.