keepassxc

KeePassXC is a free and open-source password manager.

7.6/10

How we calculate ratings →

Handling

Does the policy allow personally-targeted or behavioral marketing? No

10/10

Does the service allow you to permanently delete your personal data? N/A

5/5

Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.

Score

Yes, by contacting someone

60%

Yes, using an automated mechanism

100%

N/A

The service doesn't collect any personal information.

100%

Citation

When you visit our website, we collect the following data:

Your anonymized IP address (we store only the first 2 byte for IPv4 and the first 6 byte for IPv6)
          Your browser user agent and plugin configuration
          Your HTTP referrer if coming from another website
          Your screen size configuration
          Your geo location as far as we can determine it from the anonymized IP address

The browser user agent usually contains the following information:

Your browser name and version
          Your operating system name and version
          Your processor architecture

Notes

No PII data captured or stored

Does the service allow third-party access to private personal data? Yes, all parties specified (only to critical service providers)

8/10

This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).

Note that whether the policy allows sharing aggregated user data does not affect this question.

If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).

If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).

Score

Yes

The policy allows sharing personal data with third parties (not just critical service providers), and does not explicitly list the third parties.

Yes, all parties specified (including non-critical service providers such as advertisers)

30%

Yes, not all parties specified (but only to critical service providers)

70%

Yes, all parties specified (only to critical service providers)

80%

100%

Citation

The website and all data related to it is hosted at uberspace.de, which is also where your email will be stored when you send us one. Uberspace.de are only responsible for providing the needed IT infrastructure and do not access or use your data directly.

When does the policy allow law enforcement access to personal data? Not specified

0/5

Transparency

Does the policy outline the service's general security practices? Yes, including audits

2/3

Is the policy's history made available? No

0/5

Does the policy require users to be notified in case of a data breach? N/A

7/7

Will affected users be notified when the policy is meaningfully changed? No

0/5

Collection

Does the service collect personal data from third parties? No

10/10

Is it clear why the service collects the personal data that it does? Yes

10/10

Does the service allow the user to control whether personal data is collected or used for non-critical purposes? On an opt-out basis, for all non-critical data/uses

6/10

Does the policy list the personal data it collects? Yes, exhaustively

10/10

Score

The policy does not claim to not collect personal data, but it also doesn't provide any meaningful insight into the types of personal data it collects.

Only summarily

The policy uses overly vague language to provide a summary of the types of collected personal data.

30%

Yes, generally

All general categories of collected personal data are listed, though not all types of personal data are explicitly mentioned (for example, the list might use a phrase like 'such as' when listing types of personal data).

70%

Yes, exhaustively

All types of collected personal data are listed specifically

100%

N/A (no personal data is collected)

100%

Citation

When you visit our website, we collect the following data:

Your anonymized IP address (we store only the first 2 byte for IPv4 and the first 6 byte for IPv6)
          Your browser user agent and plugin configuration
          Your HTTP referrer if coming from another website
          Your screen size configuration
          Your geo location as far as we can determine it from the anonymized IP address

The browser user agent usually contains the following information:

Your browser name and version
          Your operating system name and version
          Your processor architecture

The website and all data related to it is hosted at uberspace.de, which is also where your email will be stored

Last Updated

May 14, 2021

Sources

Source #1 ↗

Contributors

newuser_frLoi