What we keep, and what we can't see

Last updated September 26, 2026. KeysWalletWatch and this website are run by Beckham Enterprises, LLC ("we").

This website

• No cookies, no local storage, no advertising or tracking scripts, no embedded third-party content. The font is served from this site.
• No analytics. This site doesn't run an analytics script. If we add Cloudflare Web Analytics (which is cookieless and aggregate-only) we'll update this page.
• Hosting. The site is served by Cloudflare Pages. Like any web host, Cloudflare processes your IP address and request details to deliver pages and block attacks.
• Downloads come from Cloudflare R2 storage; the same applies.
• Buying. When you press Buy, your browser sends the product name, quantity and this page's address to our license service (licenses.beckhamenterprises.com), which opens a Stripe Checkout page. Stripe handles your card; we never see the card number. We receive your name, email and what you bought so we can send your key.

The KeysWalletWatch app

• Your vault stays on your PC, encrypted. We never receive your master password, your recovery key or the contents of your vault.
• No telemetry. The app sends no usage statistics, crash reports or analytics.
• Licensing. To request a trial or activate a key, the app contacts licenses.beckhamenterprises.com with your email (for a trial) or key, a machine identifier, a device label, the app version and Windows version. It checks in about once a day while online so refunds, seat moves and sync plans take effect.
• Breach checks, only when you run one, send the first 5 characters of each password's SHA-1 hash to Have I Been Pwned (api.pwnedpasswords.com). Your passwords and full hashes are never sent.

The sync relay

Only if you turn on sync or share a project, the app talks to our relay at sync.keyswalletwatch.com. It stores:

• Your vault and shared projects as encrypted blobs, with a version number, plus earlier versions for 30 days. We cannot decrypt them.
• For each paired PC: the device name you gave it and a hashed access token.
• For shared projects: member names, roles (owner, editor, viewer), public keys, and each member's copy of the project key, encrypted so only that member can open it.
• Pairing and invite codes while they're valid (minutes).
• Which vaults each license is syncing, so plan limits can be applied. The relay doesn't store your email address.

The relay also necessarily sees when uploads happen, how large they are, and the IP addresses they come from. If you stop syncing, your PCs keep their own copies; you can remove paired devices from the app.

Your choices and rights

You can use KeysWalletWatch without sync and without ever running a breach check. You can ask us what we hold about you, and ask us to correct or delete it, through the Beckham Enterprises contact page (opens in a new tab). We don't sell or share personal information for advertising. This site doesn't respond to Do Not Track signals because it doesn't track you in the first place.

Changes

If we add a service that handles your data, we'll list it here and update the date above.

See also: how the encryption works and the terms (opens in a new tab).