Snaplock privacy policy

Effective 18 October 2026.

Snaplock is a password manager for Android made by Eren Malkoç. This policy covers the app as distributed on GitHub, F-Droid and Google Play.

What Snaplock collects

Nothing. Snaplock has no account, no server, no analytics, no crash reporting and no ads. The developer receives no data from the app.

Your vault

Your passwords, passkeys and other entries are stored in a KeePass file that you choose, encrypted with your master password, key file or both. Snaplock reads and writes only that file, through Android's file picker. Whether the file is synced elsewhere is up to you and the app you use for it. The decrypted vault is kept in memory only while it is unlocked.

Before the first save of each day, Snaplock keeps a copy of the encrypted file in its own storage on your device for 7 days. These copies are excluded from Android backups. If you turn on biometric unlock, your master password is encrypted with a key that never leaves your device's secure hardware and is also excluded from backups.

Optional online features

Both are off until you turn them on in Snaplock's settings.

  • Breach check. To check a password against known breaches, Snaplock sends the first 5 characters of its SHA-1 hash to Have I Been Pwned (api.pwnedpasswords.com). The password and its full hash never leave the device. Have I Been Pwned's own privacy policy applies to that request.
  • Site icons. To show a website's icon next to an entry, Snaplock asks that website (or the server its page names for the icon) for it and stores the icon in your vault. The website sees an ordinary request from your phone.

Permissions

  • Internet, only for the two optional features above.
  • Camera, only when you scan a 2FA QR code.
  • Biometrics, only if you turn on biometric unlock or use passkeys.
  • Autofill and Credential Manager services, only if you choose Snaplock as your password service. They read the sign-in form on screen to suggest your entries and do not keep or send it anywhere.

Deleting your data

Delete the vault file to delete your data. Uninstalling Snaplock removes its settings and daily backup copies from the device.

Contact

Questions about this policy: malkoceren24@gmail.com, or open an issue on GitHub.