Privacy: What This Site, the App and Sync Keep

Last updated September 26, 2026. Keys Wallet & Watch and this website are run by Beckham Enterprises, LLC ("we").

This website

No cookies, no local storage, no advertising or tracking scripts, no embedded third-party content. The font is served from this site.
Cloudflare Web Analytics counts page views without cookies and without identifying you: it records things like the page, referring site, browser type and country, in aggregate.
Hosting. The site is served by Cloudflare Pages. Like any web host, Cloudflare processes your IP address and request details to deliver pages and block attacks.
Downloads come from Cloudflare R2 storage; the same applies.
Buying. When you press Buy, your browser sends the product name, quantity and this page's address to our license service (licenses.beckhamenterprises.com), which opens a Stripe Checkout page. Stripe handles your card; we never see the card number. We receive your name, email and what you bought so we can send your key.

The Keys Wallet & Watch app

Your vault stays on your PC, encrypted. We never receive your master password, your recovery key or the contents of your vault.
No telemetry. The app sends no usage statistics, crash reports or analytics.
Licensing. To request a trial or activate a key, the app contacts licenses.beckhamenterprises.com with your email (for a trial) or key, a machine identifier, a device label, the app version and Windows version. It checks in about once a day while online so seat moves, revocations and sync plans take effect.
Updates. When it starts (1.6.4 and later), the app asks keyswalletwatch.com whether a newer version exists. That request carries only what any web request does, such as your IP address and the app's version; nothing from your vault.
Breach checks, only when you run one, send Have I Been Pwned (api.pwnedpasswords.com) the first 5 characters of a scrambled fingerprint (SHA-1 hash) of each password. Your passwords and their full fingerprints are never sent. How this works.

The browser extension

The Keys Wallet & Watch extension for Chrome and Edge connects your browser to the app installed on the same computer. It does not collect, store or send any personal data, and it makes no network requests of its own.

What it passes to the app. When you click Fill or Fill code, or submit a login form, the extension hands the page's address and the login fields to the app on your PC through the browser's native messaging channel, encrypted with a key that only your browser and your app hold. The app decides what to fill or save, and asks you before saving. A two-factor code is filled the same way: one current code for the login you just used, only when you click.
What it keeps on your device. The key pair that identifies your browser to the app, the name you gave the browser, and your "submit after filling" preference. Removing the extension removes them.
What it never holds. Passwords, keys, two-factor secrets or the contents of your vault. Those stay in the app, and a browser you no longer trust can be disconnected from the app's Settings at any time.

The Android app

The Keys Wallet & Watch app for Android stores your vault on your phone, encrypted with a key derived from your master password; the app cannot read it without that password or the fingerprint unlock you set up, and neither can we. If you pair the phone with a computer, the encrypted vault travels between your devices through our sync relay (sync.keyswalletwatch.com) over HTTPS; the relay keeps the encrypted copy and the random device token that identifies your phone, and nothing else. It cannot decrypt the vault. The app sends no analytics, uses no advertising identifier and contains no third-party tracking. The camera is used only to scan a pairing code or a two-factor QR code, on the device; no image is stored or sent. To delete your data, remove the vault from the phone and revoke the phone in the device list on your computer, which deletes its token; to have the relay's encrypted copy of a vault deleted, use the steps under "Delete your data" below. Vaults nobody has synced for 400 days are deleted automatically.

Delete your data (Keys Wallet & Watch for Windows and Android, by Beckham Enterprises)

Everything we could hold about you is listed on this page. To delete it:

On the phone: open Settings in the Keys Wallet & Watch app and remove the vault, or uninstall the app. This deletes the phone's encrypted copy of the vault and its unlock settings.
On your computer: in the desktop app, open Settings, Sync, and remove the phone (or any PC) from the device list. This deletes that device's access token from the relay at once.
On the relay: to have the relay's encrypted copy of a vault deleted now, with its 30-day history, write to raymond@beckhamenterprises.com or use the Beckham Enterprises contact page (opens in a new tab) and give the vault's name. We delete it within 30 days, usually much sooner, and reply when it is done.

What is deleted: the encrypted vault and its earlier versions, the device names and tokens, shared-project memberships, and the record of which vaults your licence syncs. What is kept: your licence record (email address, licence key, purchase date) stays with our licence and payment providers for tax and accounting, for as long as the law requires; ask us and we delete whatever is not legally required. Without a request, a vault nobody has synced for 400 days is deleted automatically.

The sync relay

Only if you turn on sync or share a project, the app talks to our relay at sync.keyswalletwatch.com. It stores:

Your vault and shared projects as encrypted blobs, with a version number, plus earlier versions for 30 days. We cannot decrypt them.
For each paired PC: the device name you gave it and a hashed access token.
For shared projects: member names, roles (owner, editor, viewer), public keys, and each member's copy of the project key, encrypted so only that member can open it.
Pairing and invite codes while they're valid (minutes).
Which vaults each license is syncing, so plan limits can be applied. The relay doesn't store your email address.

The relay also necessarily sees when uploads happen, how large they are, and the IP addresses they come from. If you stop syncing, your PCs keep their own copies; you can remove paired devices from the app. A vault or shared project that no device has uploaded to for 400 days — every unlock and edit uploads — is deleted from the relay automatically, along with its history.

Your choices and rights

You can use Keys Wallet & Watch without sync and without ever running a breach check. You can ask us what we hold about you, and ask us to correct or delete it, through the Beckham Enterprises contact page (opens in a new tab). We don't sell or share personal information for advertising. This site doesn't respond to Do Not Track signals because it doesn't track you in the first place.

Changes

If we add a service that handles your data, we'll list it here and update the date above.

See also: how we keep your vault safe, the technical details and the terms.

What we keep, and what we can't see