Privacy Policy
How NOPKEY ID collects, uses, and protects information when you use the service.
This policy applies to the NOPKEY ID web service. NOPKEY ID helps people and Teams identify physical security keys and record the services those keys protect. NOPKEY ID does not store passwords, PINs, passkeys, private keys, recovery codes, or third-party account credentials.
Information we collect
- Account information: email address, display name when supplied by an identity provider, authentication provider, and an internal account identifier.
- Security-key management records: NOPKEY ID, key name, manufacturer, model, serial number if you enter one, role, Key Set, holder, purpose or location, lifecycle status, and the services you record for the key.
- Team information: workspace name, key assignments, holder names or business email addresses, and departments entered by authorized users.
- Recovery communications: Finder messages and optional finder contact details. These are shown privately to the key owner or authorized Team users.
- Operational information: sign-in and security events, audit records, email-delivery status, device class, campaign/source parameters, and limited product events. When available, an internal session identifier is stored only as a shortened cryptographic digest for product analytics.
Google sign-in data
If you choose Google sign-in, NOPKEY requests only the standard openid, email, and profile scopes. We use the verified email address, basic profile name, and Google account identifier to create or access your NOPKEY account. NOPKEY does not request access to Gmail, Google Drive, contacts, calendars, or passwords. We do not sell Google user data or use it for advertising.
How we use information
- Provide sign-in, ID Label activation, key records, Team workspaces, comparisons, reminders, exports, and lost-key recovery communication.
- Secure the service, enforce rate limits, investigate failures, prevent abuse, and maintain auditability.
- Send requested sign-in codes, Finder alerts, and enabled product guidance emails.
- Understand feature use and improve the product using first-party operational events.
- Respond to support, privacy, export, correction, and deletion requests.
Service providers and disclosure
NOPKEY uses Cloudflare for hosting and database infrastructure, Google for optional account sign-in, and Resend for transactional email delivery. These providers process information only as needed to provide their services. We may also disclose information when required by law, to protect users or the service, or as part of a business transaction with appropriate safeguards. We do not sell personal information.
Cookies
NOPKEY uses strictly necessary cookies for signed-in sessions and short-lived OAuth security state. We do not use third-party advertising cookies. First-party product events are stored in the NOPKEY database rather than sent to an advertising network.
Retention and your choices
We retain account and key-management records while the account or workspace is active and as reasonably necessary for security, recovery, legal, and operational purposes. Retention can differ for audit events, delivery logs, and backups. You can export available account data from NOPKEY ID. To request access, correction, or deletion, use the Contact page. We may need to verify the request and may retain limited records where legally required or necessary to protect the service.
Security and international processing
We use access controls, encrypted transport, security headers, rate limits, and restricted administrative access. No online service can guarantee absolute security. Cloud providers may process information in countries other than your own under their applicable safeguards.
Children
NOPKEY ID is intended for adults and organizations and is not directed to children under 16. Do not submit a child’s personal information through the service.
Changes and contact
We may update this policy as the product changes. The effective date above will be revised when material changes are published. Questions and privacy requests can be sent through the NOPKEY Contact page.