Last updated: 26 May 2026
When you register for an account, we collect your username and email address. When you upload a file for password recovery, we temporarily store the encrypted file (ZIP or PDF) in a temporary directory on our server. We do not collect or store any payment card information — all payments are processed by Dodo Payments, a third-party payment processor.
Your email is used solely for account verification (OTP delivery) and service-related communications. Uploaded files are processed for password recovery only and are automatically deleted based on our retention policy. We do not read, share, or distribute the contents of uploaded files beyond the password recovery process you request.
We use a single HTTP-only cookie (kryptix_token) to maintain your authenticated session. This cookie is strictly necessary for the functioning of the service and is set only after successful login. No third-party tracking cookies are used.
Uploaded files are stored in /tmp/kryptix_uploads/ on the server. Files are automatically deleted after the password recovery process completes. Preview images and generated wordlists are stored in /tmp/kryptix_previews/ and /tmp/kryptix_wordlists/ respectively and are cleaned up according to the configured retention period (TMP_RETAIN_HRS).
We send transactional emails only — account verification (OTP) codes. We do not send marketing emails, newsletters, or promotional communications. Email delivery is handled via SMTP using credentials configured by the service operator.
All payments are processed by Dodo Payments. We do not see, store, or have access to your payment card details. Dodo Payments handles all payment data in accordance with their own privacy policy and PCI compliance standards. Our service only receives a confirmation of payment along with a payment identifier.
We do not sell, trade, or share your personal data with third parties except as required to provide the service (Dodo Payments for payment processing) or as required by law.
Account information (username, email, hashed password) is retained for the lifetime of your account. You may request deletion of your account and associated data by contacting us. Temporary files (uploads, previews, wordlists) are automatically cleaned up according to the configured retention policy.
You have the right to access, correct, or delete your personal data. To exercise these rights, please contact the service operator. You may also request a copy of the data we hold about you.
We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the service after changes constitutes acceptance of the updated policy.
For privacy-related inquiries, please contact thengakola420@gmail.com.