StrideAuthInformation used to provide the service
Depending on the features you use, StrideAuth may process:
- Account information such as your email address and profile name
- Authentication records, sessions, email-verification state, 2FA state, and security events
- Encrypted vault records and the non-secret metadata needed to store, order, and retrieve them
- Import files in browser memory while they are parsed and encrypted
- Messages you choose to send to support or security
- Standard request information such as IP address, time, user agent, and requested URL in hosting and security logs
Vault contents
Vault item fields are encrypted in the browser before storage. The service stores encrypted blobs rather than plaintext item names, usernames, passwords, notes, authenticator secrets, recovery codes, card details, and tag names. See Security at StrideAuth for the key hierarchy, recovery consequences, and limits of this model.
Why information is used
Information is used to:
- Create and secure accounts
- Store and synchronize encrypted vault data
- Verify email addresses and deliver account-security messages
- Prevent abuse and investigate service failures
- Respond to support, privacy, and security requests
- Operate and improve the website and product
Website analytics and cookies
The marketing website (www.strideauth.com and related marketing pages) uses Google Analytics to understand how the site is used, for example page visits, referrers, approximate location derived from IP address, and device or browser information. Google processes that analytics data under its terms. Learn more in Google’s privacy policy. You can limit Google Analytics in many browsers with the Google Analytics opt-out browser add-on.
The marketing site does not intentionally set a StrideAuth account cookie. Hosting and security infrastructure may also process ordinary request logs. StrideAuth does not use marketing-site analytics to read vault contents.
The product application (app.strideauth.com) does not load Google Analytics. It uses cookies required for account sessions and security. StrideAuth does not use those required cookies for advertising.
Service providers and data locations
StrideAuth uses service providers for website delivery, website analytics, application and database hosting, transactional email, error monitoring, security, and payment processing. Those providers process the information needed to perform their services under their agreements with StrideAuth. Website analytics for the marketing site includes Google Analytics.
Information may be processed in countries other than the one where you live. When applicable law requires safeguards for an international transfer, StrideAuth uses an appropriate transfer mechanism.
Retention and deletion
Account information and encrypted vault data are kept while the account is active. When an account is deleted, StrideAuth removes or de-identifies associated service data, subject to limited backup cycles and records retained for security, fraud prevention, billing, dispute resolution, or legal obligations. Request and security logs are retained only as long as reasonably necessary for those purposes.
Your choices
You may ask about account data, correction, export, or deletion by emailing [email protected]. Depending on where you live, you may also have rights to object, restrict processing, withdraw consent, or complain to a privacy regulator.
Changes to this notice
The date at the top changes when this notice is materially updated. If a change materially affects how account information is handled, StrideAuth provides notice through the service or by email when appropriate.