Français · English

Privacy Policy

PasseMots — browser extension and service. Last updated: July 2026.

PasseMots is a zero-knowledge secrets manager. Your data is encrypted and decrypted in your browser. The server only ever stores encrypted data it cannot read: neither PasseMots nor its hosting provider can access the contents of your vault.

Data handled by the extension

• The extension uses the browser's storage API solely to keep your session locally while you use it. The decryption key derived from your master password stays in memory and is never transmitted.
• The extension's only network destination is your account API, https://passemots.e2pz.app.
• No data is transmitted in the clear. Your secrets never leave your device unencrypted.

What we do not do

• No telemetry, no trackers, no advertising.
• No resale or sharing of data with third parties.
• No cleartext access to your credentials, passwords, notes or files.

Permissions requested and why

• storage: keep the session locally.
• Access to https://passemots.e2pz.app/*: communicate with your account API.
• Content scripts on pages: show the fill button next to login fields. Filling is never automatic — you confirm it yourself (anti-phishing protection).

Hosting

Encrypted data is hosted in France.

Contact

For any question about your data: contact@e2pz.app.