Kestrove website: home page with downloads, support and privacy pages

Co-Authored-By: Claude Opus 5.5 <[email protected]>

privacy.html

@@ -0,0 +1,64 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Kestrove Privacy Policy</title>
+<link rel="icon" href="/favicon.svg" type="image/svg+xml">
+<link rel="stylesheet" href="/legal.css">
+</head>
+<body>
+<main>
+<p class="home"><a href="/">Kestrove home</a></p>
+<header><img src="/favicon.svg" alt=""><h1>Privacy Policy</h1></header>
+<p class="muted">Kestrove apps for iPhone, iPad, Mac, Android, Windows and Linux, the Kestrove browser extension, and the Kestrove server. Effective 30 October 2026.</p>
+
+<section>
+<h2>The short version</h2>
+<p>Kestrove does not collect any data about you. There are no accounts with us, no analytics, no advertising and no tracking. Your passwords are encrypted on your own devices and are only ever synced to a server <strong>you</strong> choose and run.</p>
+</section>
+
+<section>
+<h2>Your vault</h2>
+<p>Everything you store in Kestrove (logins, passwords, passkeys, notes, cards and other items) is encrypted on your device with keys derived from your master password and your Secret Key before it is saved or synced. Neither the developer of Kestrove nor the operator of the server can read it.</p>
+<p>When you turn on sync, your encrypted vault is sent to the Kestrove server at the address you enter in the app. That server is run by you (or by someone you choose); it is not operated by the developer. It stores encrypted vault data, your devices' public keys and names, and a login verifier that is not your password (OPAQUE). Its operator is responsible for it.</p>
+</section>
+
+<section>
+<h2>What the apps use on your device</h2>
+<ul>
+<li><strong>Face ID, Touch ID or fingerprint</strong>: to unlock your vault. Biometric data never leaves your device's secure hardware, and Kestrove never receives it.</li>
+<li><strong>Camera</strong>: only to scan Kestrove setup and sign-in QR codes. Nothing is recorded or stored.</li>
+<li><strong>AutoFill, Credential Manager and the browser extension</strong>: to offer and fill your saved logins and passkeys in apps and websites. The website or app address is used on your device to find matching items and is not sent anywhere.</li>
+<li><strong>Network</strong>: only to talk to your own Kestrove server. The one exception is the Windows app, which checks for updates once a day. That check reveals your computer's IP address and the app version to the server that hosts the updates, and nothing from your vault. You can turn it off in Settings.</li>
+</ul>
+</section>
+
+<section>
+<h2>This website</h2>
+<p>This website has no analytics, cookies or trackers. Like any web server, it may keep short-lived technical logs, including IP addresses, to keep the site running.</p>
+</section>
+
+<section>
+<h2>Sharing and selling</h2>
+<p>No data is shared with or sold to anyone, because no data is collected.</p>
+</section>
+
+<section>
+<h2>Deleting your data</h2>
+<p>Deleting the app removes the data on that device. Your server's operator can remove a device from your account in the web vault (Devices) or delete the server's data entirely.</p>
+</section>
+
+<section>
+<h2>Children</h2>
+<p>Kestrove is not directed at children and collects no personal information from anyone.</p>
+</section>
+
+<section>
+<h2>Changes and contact</h2>
+<p>If this policy changes, the new version is published at this address with a new effective date.</p>
+<p>Questions: <a href="/support.html">Kestrove support</a>.</p>
+</section>
+</main>
+</body>
+</html>