Privacy Policy
Deadman Secrets keeps the things you want passed on — passwords, documents, messages — and delivers them to the people you choose if you stop checking in. It is built so that we cannot read what you store. This policy explains what we can see, what we keep, who helps us run the service, and the choices you have.
1. The short version
- Your vault is end-to-end encrypted. Secrets, files, messages and playbooks are encrypted on your device before they reach us. We hold only ciphertext and cannot decrypt it.
- We never see your password. Sign-in uses the OPAQUE protocol, so your password never leaves your device, not even in a form we could test.
- We do see what we need to contact people: your email address, and the names and email addresses of the beneficiaries and emergency contacts you add.
- We do not sell or rent personal information, show ads, or use analytics or tracking cookies.
- Your data is stored with Amazon Web Services in the United States.
2. What we collect
From you, when you use the service
- Account: email address, an optional display name, your plan, and whether you have verified your email.
- Encrypted vault data: everything you store, as ciphertext only, with the encrypted key material that lets your devices — and, when a switch fires, your beneficiaries — open it.
- People you add: each beneficiary's and emergency contact's name and email address, so we can reach them. Tell them you have added them.
- Check-in activity: when you check in, your check-in settings, and whether and when a switch has fired.
- Gifts: if you buy a plan as a gift, your name and email and the recipient's email address.
- Email preferences: whether you agreed to product news and guides and to offers and upgrades, and when and where you chose.
- Messages to us: what you send through our contact form or by email.
Automatically
- Request logs: IP address, time, the request made, and the browser's user agent, used for security and rate limiting. Kept for 14 days.
- One cookie: a secure, HttpOnly sign-in cookie that keeps you signed in. It is strictly necessary and is not used for tracking.
Payments
Card details go directly to our payment processor, Stripe. We never receive your card number; we keep a Stripe customer reference and your subscription status.
3. How we use it
- To run the service: sign-in, storing your encrypted vault, check-in reminders, and delivering your vault to your beneficiaries when a switch fires.
- To send account and security email — verification, check-in reminders, billing and gift notices. These are part of the service and are not marketing.
- To send product news and guides, or offers and upgrades, only if you agreed to that kind of email (section 5).
- To keep the service secure, prevent abuse, and meet legal obligations.
If a switch you set up has fired, we stop all marketing email to your address — whatever you agreed to before — so that a family is never sent promotions at that time.
4. Sales and partnership contacts
If you contact us about a business, employer or partner plan, or our team is in touch with you about one, we keep your contact details and our notes in our sales system. Those details are encrypted before they are stored and can be opened only by the member of our team working with you, through a secured, audited system; no one else at Deadman Secrets can read them. If you also have a Deadman Secrets account, our sales team may see that you are a customer and, for administrators, your plan and how much of the service you use (for example, how many items you store and when you last checked in) — never what you store.
5. Email you can turn off
We send marketing email only with your agreement, in two kinds you choose separately: product news and guides, and offers and upgrades. Every such email has a one-click unsubscribe link, and you can change either choice at any time in Settings. Turning them off never affects check-in reminders, security notices, or anything your beneficiaries receive. If an email to you bounces or you report it as spam, we stop sending marketing email to that address.
6. Who helps us run the service
- Amazon Web Services (United States) — hosting, storage, encryption keys, and sending email.
- Stripe — payments.
- hCaptcha (Intuition Machines, Inc.) — bot protection on sign-up and the contact form. It receives your IP address and information about your browser.
- Apple and Google push notification services — once our mobile apps are available, to deliver notifications to your phone. Notifications contain no personal information.
We share personal information otherwise only when the law requires it, to protect people from harm, or as part of a sale or reorganisation of our business, in which case this policy continues to apply.
7. How long we keep it
- Account and vault data: until you delete your account (section 8).
- Request logs: 14 days.
- Backups: replaced continuously and expire within 35 days, so deleted data leaves our backups within 35 days of deletion.
- Sales contacts: for as long as we are in touch, then deleted on request.
- Records of an unsubscribe or a bounce: kept, so that we keep honouring them.
8. Your choices and rights
You can see and change your account details and email preferences in the app. You can ask us to give you a copy of the personal information we hold about you, to correct it, or to delete your account and its data, by writing to info@deadmansecrets.com. We will answer within 30 days. Because your vault is encrypted with keys we do not have, we cannot give you a copy of what you store in it — but you can open and copy everything in it from the app at any time.
Depending on where you live — for example California, or the European Economic Area and the United Kingdom — you may have further rights, such as to object to or restrict how we use your information, or to complain to a data protection authority. We will honour them. We do not sell or share personal information for cross-context behavioural advertising.
If you are in the European Economic Area or the United Kingdom. Deadman Secrets, LLC is the controller of your personal information. We use it to provide the service you signed up for (performance of a contract); to keep the service secure and prevent abuse, including request logs and bot checks (our legitimate interests); to send marketing email only with your consent, which you can withdraw at any time; and to meet legal obligations. Your information is stored in the United States. You can exercise your rights — access, correction, deletion, portability of what we hold, restriction and objection — by writing to the address below, and you may complain to your local data protection authority (in the UK, the Information Commissioner's Office).
9. Security
End-to-end encryption, a password protocol in which we never see your password, encryption keys held in hardware-backed key management, and delivery through attested secure enclaves are described on our Security page. No system is perfectly secure; if a breach affects your personal information we will tell you as the law requires.
10. Children
Deadman Secrets is for adults. You must be 18 or older to create an account, and we do not knowingly collect information from children.
11. Changes
If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.
12. Contact
Deadman Secrets, LLC · PO Box 161, Staunton VA 24402 · info@deadmansecrets.com