Password Manager (cout970-password-manager)

Last updated: 9 August 2026


This extension does not collect, transmit, or sell any personal data. There is
no analytics, no telemetry, no crash reporting, and no third-party service of
any kind.

Everything the extension holds stays in your own browser profile. The only time
anything leaves your device is when you personally press Push or Pull on
the Remote copy screen, and what travels then is an encrypted blob that the
receiving service cannot read.


Your vault is kept in your browser's local extension storage
(browser.storage.local) as a single encrypted file. It is encrypted with
AES-256-GCM, using a key derived from your master password with PBKDF2-SHA-512
at 100 000 iterations.

The vault holds your items: their names, usernames, email addresses, website
addresses, notes, the recipe used to derive each password, and any secrets you
chose to store rather than derive (recovery codes, PINs, TOTP seeds). All of it
is inside the encrypted file. The only values written in the clear are the vault
format version and the date it was last saved, so the unlock screen can show
them before you type anything.

Most passwords are not stored at all. They are recomputed from your master
password and the item's recipe each time you ask for one.


Your master password is never written to disk, and never sent anywhere.

While you are using the extension it is held in browser.storage.session, which
exists only in memory and is discarded when the browser closes. It is also
forgotten after five minutes of inactivity, at which point the vault locks and
you must type it again.

It cannot be recovered. Nobody, including the author, can unlock your vault or
reset it for you.


Nothing, unless you ask for it.

The extension makes no network request on its own. It has no content scripts, no
background process, and no automatic sync. It performs a network request in
exactly three situations, each one started by you clicking a button:

1. Push on the Remote copy screen.
2. Pull on the Remote copy screen.
3. Fetch on the Import screen, when importing from a URL.

All three go to ps.cout970.net and nowhere else. The extension is built so
that no other address can be reached: its manifest declares a single optional
host permission for that one host, granted only when you first push or pull, and
any other address is refused before a request is made.


ps.cout970.net is a PublicStorage
instance operated by the author of this extension. When you push, it receives:

• The name and password of your account on that service — these are separate
  credentials that you choose when setting it up. They are not your master
  password.
• Your vault, already encrypted, exactly as it sits on disk.

The service stores the vault as an opaque blob. It never receives your master
password and cannot decrypt what it holds. As with any web request, it also
necessarily sees your IP address and the timing of the request.

Your remote settings, including the service password, are stored inside the
encrypted vault.

Using the remote copy is entirely optional. If you never open that screen, the
extension never contacts any server, and the host permission is never granted.


| Permission | Why it is needed |
| --- | --- |
| storage | To keep the encrypted vault file, and the five-minute unlocked session. |
| activeTab | To read the address of the tab you are on, so the popup can offer items matching that site. It is granted only while the popup is open, the address is compared locally, and it is never recorded or transmitted. |
| clipboardWrite | To copy a password or a field, and to clear the clipboard afterwards. |
| https://ps.cout970.net/* | Optional, and requested only when you first push or pull the remote copy. Never granted otherwise. |

The extension does not request permission to read or modify the content of the
pages you visit, and it does not inject anything into them.


The vault lives in your browser profile, so you control it entirely.

• Settings → Delete this vault erases it from local storage.
• Uninstalling the extension removes its storage along with it.
• If you pushed a copy to the remote service, deleting it there is separate:
  remove it through that service, since uninstalling the extension does not
  reach it.

Export your vault before deleting anything you want to keep. Deletion cannot be
undone, and there is no backup held anywhere on your behalf.


This extension is a general-purpose tool and is not directed at children. It
collects no data from anyone, of any age.


Any change will be published in this file, in the extension's repository, with
the date at the top updated. Material changes will be noted in the release that
carries them.


Questions, or anything in this policy that looks wrong, are welcome as an issue
at
github.com/cout970/PasswordManagerExtension.

The source code is public, so every claim above can be checked against it.