StrideAuthInformation used to provide the service
Depending on the features you use, StrideAuth may process:
- Account information such as your email address and profile name
- Authentication records, sessions, email-verification state, 2FA state, and security events
- Encrypted vault records and the non-secret metadata needed to store, order, and retrieve them
- Import files in browser memory while they are parsed and encrypted
- Messages you choose to send to support or security
- Standard request information such as IP address, time, user agent, and requested URL in hosting and security logs
Vault contents
Vault item fields are encrypted in the browser before storage. The service stores encrypted blobs rather than plaintext item names, usernames, passwords, notes, authenticator secrets, recovery codes, card details, and tag names. See Security at StrideAuth for the key hierarchy, recovery consequences, and limits of this model.
Why information is used
Information is used to:
- Create and secure accounts
- Store and synchronize encrypted vault data
- Verify email addresses and deliver account-security messages
- Prevent abuse and investigate service failures
- Respond to support, privacy, and security requests
- Operate and improve the website and product
Website analytics and cookies
The marketing site does not enable Google Analytics. The static website does not intentionally set a StrideAuth account cookie. Hosting and security infrastructure may process ordinary request logs.
The product application uses cookies required for account sessions and security. StrideAuth does not use those required cookies for advertising.
Service providers and data locations
StrideAuth uses service providers for website delivery, application and database hosting, transactional email, error monitoring, security, and payment processing. Those providers process the information needed to perform their services under their agreements with StrideAuth.
Information may be processed in countries other than the one where you live. When applicable law requires safeguards for an international transfer, StrideAuth uses an appropriate transfer mechanism.
Retention and deletion
Account information and encrypted vault data are kept while the account is active. When an account is deleted, StrideAuth removes or de-identifies associated service data, subject to limited backup cycles and records retained for security, fraud prevention, billing, dispute resolution, or legal obligations. Request and security logs are retained only as long as reasonably necessary for those purposes.
Your choices
You may ask about account data, correction, export, or deletion by emailing support@strideauth.com. Depending on where you live, you may also have rights to object, restrict processing, withdraw consent, or complain to a privacy regulator.
Changes to this notice
The date at the top changes when this notice is materially updated. If a change materially affects how account information is handled, StrideAuth provides notice through the service or by email when appropriate.