⚠️ Important: This is a Demo Project

This password manager is a demonstration project created for educational and portfolio purposes. It is not intended for storing real, sensitive passwords or commercial use.

Use only test passwords or demo credentials. While we implement strong security practices, this is not a production-grade service with enterprise-level security guarantees.

📊 What We Collect

• Email addresses: Used only for sending verification codes during login
• Encrypted password data: Your passwords are encrypted in your browser before being stored
• Session information: Temporary login sessions for accessing your vault
• Basic logs: Authentication attempts and security events for demo purposes

🔒 Security Features (Demo Implementation)

• Client-side encryption: Passwords are encrypted in your browser using Web Crypto API
• Zero-knowledge design: The server cannot decrypt your passwords
• Secure transmission: All data sent over HTTPS
• Rate limiting: Protection against brute force attempts
• Session security: Automatic logout and secure session management

📝 Data Handling for Demo Project

• No data selling or sharing: This is a personal demo project, not a commercial service
• No tracking or analytics: We don't use cookies, tracking pixels, or analytics services
• No long-term storage guarantees: As a demo, data may be deleted without notice
• No backup or recovery: This is not a production service with data guarantees

🚨 Demo Project Limitations

No Legal Guarantees: This project is provided "as-is" for educational purposes. There are no warranties, service level agreements, or legal protections.

Data Retention: Demo data may be deleted at any time for maintenance, updates, or server changes. Do not rely on this service for permanent storage.

Security Limitations: While implementing security best practices, this lacks enterprise-grade security infrastructure, professional audits, and compliance certifications.

🎓 Educational Purpose

This project demonstrates modern web security practices including:

• Client-side encryption with Web Crypto API
• Secure authentication flows
• Input validation and sanitization
• Rate limiting and security audit logging
• Spring Boot security implementation

For learning purposes only. Not intended for production use with real sensitive data.