🔒 Zero-Knowledge Architecture
Privacy Policy
Last Updated: October 9, 2026 • Applies to Credential Hub Chrome Extension (ID: jchkhooaekoiaalkdgbdabjfmjgnkbna) & Vault Services
1. Single Purpose & Commitment
Credential Hub ("we", "our", or "us") provides a zero-knowledge password manager, session vault, and smart autofill engine designed to help users securely store credentials, generate high-entropy passwords, and autofill authentication forms across the web. We are firmly committed to zero-trust privacy and user data sovereignty.
2. Zero-Knowledge Cryptography
Credential Hub employs a strict Zero-Knowledge Architecture:
- All logins, passwords, session tokens, secure notes, and TOTP keys are encrypted and decrypted locally on your device using PBKDF2 SHA-256 key derivation and AES-256-GCM authenticated encryption.
- Your master password never leaves your browser and is never transmitted across the network in plaintext.
- We cannot read, access, or decrypt your stored credentials under any circumstances.
3. Browser Extension Permissions
To fulfill its single purpose of password management and form autofill, Credential Hub requests the following browser permissions:
- storage & unlimitedStorage: Used strictly to save encrypted vault blobs, passkeys, and user settings locally on your computer.
- activeTab: Used to inspect the current website domain when you open the popup so relevant credentials can be suggested immediately.
- tabs: Used to match website URLs to stored vault entries for autofill matching and to open account settings tabs upon user request.
- scripting & Host Permissions (http/https): Used exclusively to detect username and password fields on login forms and inject the Credential Hub autofill overlay when you choose to fill an account.
- cookies: Used to enable authenticated users to view, back up, and sync authenticated session tokens with their private vault.
- debugger: Used to dispatch trusted input automation events via Chrome DevTools Protocol for account bot workflows initiated by the user.
- sidePanel: Allows the Credential Hub vault to be displayed in Chrome's native sidepanel for split-screen accessibility.
- notifications & contextMenus: Used to alert you when items are saved and to provide right-click password autofill options in input fields.
4. Data Usage & Limited Use Policy
In accordance with Google Chrome Web Store Developer Program Policies:
- We do not sell, rent, or monetize user data to third parties, data brokers, or advertisers.
- We do not use or transfer user data for purposes unrelated to credential management and form autofill.
- We do not use or transfer user data to determine creditworthiness or for lending purposes.
- Credential Hub does not load or execute external remote JavaScript code. All assets and logic are bundled locally within the extension archive.