Terms of Service

By accessing or using CredentialBase (the "Service"), you agree to these Terms of Service ("Terms"). If you do not agree, do not use the Service.

We may update these Terms from time to time. We will notify you of material changes via email or in-product notice. Continued use after changes are published constitutes acceptance.

CredentialBase is a zero-knowledge password manager available as a Chrome browser extension. It allows you to store, manage, and autofill encrypted credentials, notes, and payment card information. Share links allow you to share individual credentials via time-limited URLs with recipients who do not need the extension.

CredentialBase operates on a freemium model: the Free tier is available at no cost with functional limitations. The Pro tier requires a paid subscription handled by Polar.sh.

You must provide a valid email address to create an account. You are responsible for maintaining the confidentiality of your master password. CredentialBase uses zero-knowledge encryption — we cannot recover your vault if you forget your master password. There is no password reset mechanism by design.

You must be at least 16 years old to use the Service. By creating an account, you represent that you meet this requirement.

The Free tier includes:

• Up to 50 vault items
• Up to 3 active share links at any time
• Share expiry options of 1 hour or 24 hours

Free tier limits may change with notice. Items above the limit on a downgrade remain accessible in read-only mode.

Pro subscriptions are billed monthly ($1.99/mo) or annually ($15.99/yr) through Polar.sh. Prices may change with 30 days notice. All charges are non-refundable except within our 30-day money-back guarantee window for first-time subscribers.

You may cancel your Pro subscription at any time. Access continues until the end of the current billing period. Cancellation does not delete your vault data.

If a payment fails, we will attempt to retry the charge. After repeated failures, your account will be downgraded to the Free tier. Your vault data is never deleted due to payment failure.

You agree not to use CredentialBase to:

• Store or share credentials for illegal purposes
• Share credentials that belong to others without authorization
• Attempt to reverse-engineer, decompile, or extract the server-side encryption keys
• Use the Service to perform automated credential stuffing or brute-force attacks
• Share links to malicious, deceptive, or illegal content
• Create accounts using false information or on behalf of third parties without consent
• Abuse the Free tier to circumvent subscription limits via multiple accounts

Your use of the Service is also governed by our Privacy Policy, incorporated into these Terms by reference. Our zero-knowledge architecture means we cannot access your vault contents. You are solely responsible for the information you store and share using the Service.

You may delete your account at any time from Settings. Deletion is immediate and permanent — all vault items, sessions, and account data are wiped from our servers. This cannot be undone.

We reserve the right to suspend or terminate accounts that violate these Terms, with notice where practicable. Egregious violations (e.g., illegal activity) may result in immediate termination without notice.

The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including fitness for a particular purpose or uninterrupted availability. We make no warranty that the Service will be error-free or that cryptographic algorithms will remain unbroken.

You are responsible for maintaining independent backups of any critical credentials stored in CredentialBase.

To the maximum extent permitted by law, CredentialBase and its creators shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of the Service, including but not limited to loss of data, loss of access to credentials, or financial loss. Our total liability for any claim shall not exceed the amount you paid us in the 12 months preceding the claim.

These Terms shall be governed by the laws of the jurisdiction in which CredentialBase is incorporated, without regard to conflict of law provisions. Disputes shall be resolved through binding arbitration where permitted by law, or in competent courts of the applicable jurisdiction.

Questions about these Terms: legal@credentialbase.com