Privacy Policy

Effective October 27, 2026

Haven is a password manager, authenticator, notes app and file vault at shutuplosr.xyz, run privately for friends and family. It isn't a company and it doesn't make money. This policy explains what Haven stores, what it can't see, and what you can do about it.

The short version

Your passwords, authenticator codes, notes, cards, files and grooming records are encrypted on your own device before they're sent. Haven's server only ever holds scrambled data and can't read it.
Haven never receives your password.
If you have a Haven email address, your mail is encrypted the moment it reaches Haven's server, so it's stored where only your devices can read it. Email itself isn't end-to-end encrypted, though: see Haven Mail.
No ads, no analytics, no tracking cookies, and nothing is sold or shared for marketing.
You can download your data or delete your account at any time.

What Haven can't see

Everything you keep in Haven (logins, passwords, authenticator secrets, notes, saved cards, grooming clients, dogs, photos and appointments, and your files, including their names) is encrypted on your device with a key that only your password or your recovery code can open. The server stores the encrypted result. Without your password or recovery code, no one, including whoever runs Haven, can read it. This also means a forgotten password and a lost recovery code can't be fixed by anyone.

Information about other people

If you turn on the Grooming tab, you may keep details about your own clients in Haven, like their names, phone numbers, email and home addresses, and their dogs' health notes and photos. Haven treats them exactly like the rest of your data: encrypted on your device, unreadable by Haven, never contacted, shared or used for anything. You decide what to record about your clients and are responsible for having their permission to keep it, and for removing it when they ask.

Haven Mail

Some accounts have an @shutuplosr.xyz email address, given by whoever runs Haven. For those accounts:

Mail you receive passes through Cloudflare's email service and reaches Haven's server like any email: readable while it travels, as all normal email is. The server encrypts each message as soon as it arrives, with a key that only your devices hold, and doesn't keep a readable copy. The sender, subject and date are encrypted along with it.
Mail you send goes out through Resend, which receives the message to deliver it, as any email provider would. Haven keeps the copy in your Sent folder encrypted the same way.
What the server can see about your mail: which of your folders each message is in, whether it's been read, its size and when it arrived, and, only while a message is being received or sent, its content. Haven doesn't read, scan or keep it.
Pictures from the internet in emails stay hidden until you choose to show them, since loading them can tell the sender when you opened a message.
Messages in Trash and Spam are deleted after 30 days. Deleting a message erases it from the server straight away (encrypted copies stay in backups until those expire).

What Haven stores

Account details: your email address, first and last name, and when you signed up.
Sign-in data: a one-way fingerprint of a key derived from your password (never the password itself), and your encrypted account keys.
Your email address at shutuplosr.xyz, if you have one, and your encrypted mail (see Haven Mail).
Your encrypted data and files: plus their sizes, how many files you have, and when they were changed, so storage limits can be enforced.
Signed-in devices: for each device you're signed in on: a name based on your browser and system (for example "Edge on Windows"), or, for the Windows app, your PC's name; when it signed in; when it was last active; and whether quick sign-in (Windows Hello, or Face ID or fingerprint) is on.
Quick sign-in passes: if you turn on Windows Hello, or Face ID or fingerprint, on a device, a keyed hash of a random pass for that device, when it was made, and when you last typed your password there. The pass only works for a week after that, and is deleted when you turn quick sign-in off, sign that device out, reset your password, or after 90 days unused.
Security records: a count of recent wrong sign-ins for an email address, and whether the account is locked until an emailed code is used.
Settings: such as your auto-lock time.

What Haven doesn't store

Your password, or your recovery code.
Access logs. The server doesn't keep a record of the pages or requests you make.
Your IP address. It's kept in memory for up to an hour to limit repeated attempts, and is never written to disk.

Emails

Haven emails you sign-up, unlock and password-reset codes. It doesn't send newsletters or marketing. Mail you send from a Haven address is covered under Haven Mail.

Cookies and your device

Haven uses one cookie, __Host-haven, to keep you signed in. It's strictly necessary, holds no personal information, and ends within 7 days. There are no other cookies and no tracking, so Haven responds to "Do Not Track" signals simply by never tracking anyone.

The Windows app also keeps, on your PC: an encrypted copy of your account key and the PC's quick sign-in pass if you turn on Windows Hello (it only opens with Windows Hello on that PC), and installers it downloads to update itself.

On the website, turning on Face ID or fingerprint saves a passkey in your device's passkey store (for example iCloud Keychain or Google Password Manager, which may sync it to your other devices under their own policies), and keeps an encrypted copy of your account key and that device's pass in the browser's storage. The copy only opens after your device checks your face or fingerprint; Haven's server never receives your fingerprint, face, the passkey's secret or the copy.

Services Haven relies on

Cloudflare carries all traffic to shutuplosr.xyz, and receives email sent to @shutuplosr.xyz addresses and passes it to Haven's server. It sees your IP address and connection details, but your Haven data passes through it encrypted. Cloudflare's privacy policy.
Resend delivers Haven's emails, so it receives your email address and the content of those emails (your codes), and the messages you send from a Haven address. Resend's privacy policy.
Off-site backup storage keeps Haven's nightly backups. They're encrypted on Haven's server before they leave it, so the storage provider only ever holds data it can't read.

Haven's server is a computer run privately in the United States. Haven doesn't sell, rent or share personal information with anyone else, except where the law requires it.

How long it's kept

Your account and data are kept until you delete your account, or until it's deleted under the Terms of Use. Deleting an account erases it and its files from the server straight away; encrypted copies stay in Haven's backups until those expire, within about 3 months, and are only used to restore the server after a failure. Sign-ins end after a day without use or 7 days at most. Records of wrong sign-ins are removed after a day unless the account is locked.

Your choices and rights

See and change your data: everything is in the app or on the website when you're signed in.
Take a copy: Account > Your data > Download my data.
Delete everything: Account > Delete account.
Sign out other devices: Account > Signed-in devices.
Ask a question or make a request: email privacy@shutuplosr.xyz.

Wherever you live, including California, the EU and the UK, you can ask what Haven holds about you, ask for it to be corrected or deleted, or take a copy. Haven doesn't sell or share personal information, as those terms are used in California law, and won't treat you differently for using your rights.

Security

Haven uses end-to-end encryption (AES-256-GCM, with Argon2id to protect your password), keeps its server behind Cloudflare with no open ports, and locks accounts after repeated wrong sign-ins. No system is perfectly secure. If a breach ever affected your information, you'd be told by email as the law requires.

Children

Haven isn't meant for children under 13, and doesn't knowingly hold their information. If you believe a child under 13 has an account, email privacy@shutuplosr.xyz and it will be deleted.

Changes

If this policy changes, the date at the top changes too. Signed-up users will be told about important changes by email or in the app before they take effect.

Contact

Haven, shutuplosr.xyz · privacy@shutuplosr.xyz