Secret BoxTerms & Licence
Last updated: 29 July 2026
Read this part even if you skip the rest. Secret Box cannot recover your data. If you lose your master password and your recovery code, your vault cannot be opened by anyone, including us. Keep encrypted backups and keep your printed recovery sheet somewhere safe.
1. What you are buying
A perpetual, non-exclusive, non-transferable licence to use Secret Box version 1 (“v1”) on any number of devices that you personally own or control, or that are controlled by the organisation that purchased the licence for the named user.
Your licence includes all v1 updates. Future major versions (v2 and later) may be offered as separate paid upgrades; your v1 licence continues to work with v1 indefinitely regardless.
2. What you may not do
- Resell, sublicense, rent, or redistribute the software or your licence key.
- Share your licence key publicly or with people outside your household or organisation. Keys are issued against an email address and display that address inside the application.
- Remove or circumvent licence checks in order to distribute the software to others.
Inspecting, auditing and modifying the software for your own use is expressly permitted — reading the code is encouraged.
3. The browser extension
The browser extension is provided free of charge and may be used without a licence.
4. No warranty
The software is provided “as is”, without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement. You use it at your own risk.
While Secret Box is built with standard, well-reviewed cryptography (AES-256-GCM and PBKDF2-HMAC-SHA-256 via the platform's WebCrypto implementation), no software is guaranteed free of defects, and no security claim here should be read as a guarantee against all possible attacks.
5. Limitation of liability
To the maximum extent permitted by law, our total liability arising from or relating to the software is limited to the amount you paid for your licence. We are not liable for indirect, incidental, special or consequential damages, including loss of data, loss of access to accounts, or lost profits.
Nothing in these terms limits liability that cannot be limited by law, including liability for fraud, or your statutory consumer rights in your jurisdiction.
6. Your responsibilities
- Choosing a strong master password and keeping it secret.
- Storing your recovery code somewhere safe and separate from your devices — anyone holding it can open your vault.
- Keeping your own encrypted backups. The software makes this easy and free; performing it is up to you.
- Keeping the devices you install on reasonably secure. An unlocked vault on a compromised device is readable, as with any password manager.
7. Refunds
If the software does not work for you, contact us within 14 days of purchase for a full refund. Refunds are processed by our payment provider, who is the merchant of record. A refunded licence key may be added to a deny-list in subsequent releases.
8. Support
Support is provided by email on a best-effort basis. Please note the one thing support genuinely cannot do: recover a vault whose master password and recovery code are both lost.
9. Changes and termination
These terms may be updated for future purchases; the version in force when you bought your licence continues to govern it. Your licence terminates only if you breach section 2, and even then you keep the right to export your own data.
10. Governing law
These terms are governed by the laws of the jurisdiction in which the seller is established, without regard to conflict-of-law rules, and without affecting mandatory consumer protections in your country of residence.