Terms of Service

1. Acceptance and eligibility

By creating an account or using Stillkey, you agree to these Terms of Service and acknowledge the Privacy Policy. If you do not agree, do not use the service.

You must be at least 16 years old, or the minimum age required to consent to an online service where you live. If you use Stillkey for an organization, you confirm that you have authority to accept these terms for that organization.

2. The Stillkey service

Stillkey is a browser-based password manager that lets you organize credentials in a personal vault. Vault contents are encrypted in your browser before an encrypted copy is synchronized using cloud services.

Stillkey is currently provided as an independently operated service. Features may be added, changed, or removed as the product develops. We may introduce reasonable limits needed to protect reliability, security, or other users.

3. Accounts and authentication

You are responsible for providing accurate account information, protecting your account credentials, securing devices where you use Stillkey, and promptly reporting suspected unauthorized access.

You may sign in with email and password or use an available third-party sign-in provider such as Google. Third-party sign-in is also governed by that provider’s terms. You may not use another person’s identity or access their account without permission.

4. Vault passwords, encryption, and recovery

Stillkey does not store your vault password and cannot recover or read an encrypted vault without it. Losing that password can make the vault permanently inaccessible. Resetting an account password does not necessarily decrypt or re-encrypt an existing vault.

Keep independent backups of critical credentials and recovery codes. Do not rely on Stillkey as the only copy of information needed to access essential accounts.

5. Acceptable use

You must not use Stillkey to:

• break the law, violate another person’s rights, or facilitate fraud;
• probe, disrupt, overload, or bypass the service’s security or access controls;
• introduce malware, automated abuse, or harmful code;
• access accounts, systems, or data without authorization; or
• resell or misrepresent Stillkey without written permission.

Reasonable security research must avoid accessing other users’ data, disrupting the service, or publicly disclosing an issue before there has been a reasonable opportunity to address it.

6. Your content and permissions

You retain your rights in the information you place in your vault. You give Stillkey and its service providers only the limited permission needed to host, transmit, synchronize, secure, and otherwise operate on the encrypted vault data to provide the service.

You are responsible for ensuring that you have the right to store the information you add and that your use complies with applicable law. Stillkey does not claim ownership of your vault contents and does not use them for advertising.

7. Availability and third-party services

Stillkey depends on browsers, networks, Google Firebase, Vercel, and other infrastructure outside our direct control. The service may be interrupted by maintenance, security incidents, provider outages, or technical failures.

We may suspend features when reasonably necessary to protect Stillkey, users, or third parties. Links or integrations with third-party services do not make Stillkey responsible for those services.

8. Security, disclaimers, and responsibility

Stillkey uses safeguards including browser-side encryption, HTTPS, and per-user database access rules. However, no password manager or online service can guarantee perfect security or uninterrupted availability. Stillkey has not yet completed an independent professional security audit.

To the maximum extent permitted by applicable law, Stillkey is provided “as is” and “as available,” without warranties that it will always be secure, error-free, or suitable for every purpose. You remain responsible for your account choices, backups, and use of stored credentials.

Nothing in these terms excludes or limits liability that cannot legally be excluded, or any mandatory consumer rights that apply to you.

9. Suspension, termination, and deletion

You may stop using Stillkey at any time. To request deletion of your account and associated encrypted cloud vault, email txbsahom@gmail.com from the address connected to the account.

We may suspend or terminate access if you materially violate these terms, create a security risk, or if continuing the service becomes unlawful. Where practical, we will give reasonable notice and an opportunity to address the issue.

Removing a cloud account does not automatically remove an encrypted copy stored by your browser. Clear the site data for stillkey.net on each device where you used the service.

10. Changes, governing rules, and contact

We may update these terms as Stillkey changes. Material updates will be published here with a new effective date. Continued use after an update means you accept the revised terms where permitted by law.

These terms are governed by the laws of Portugal, without taking away mandatory protections or courts available to consumers under the law of their country of residence.

Questions, support requests, and legal notices may be sent to txbsahom@gmail.com.