Privacy, advertising, and your choices

Last updated: July 13, 2026

Current status: Flosna Vault is still in development and is not yet available in the App Store or Google Play. This website does not currently serve Google AdSense ads. The advertising sections below explain the practices that will apply if AdMob or AdSense is enabled. We will update this notice when that happens.

Local by defaultYour vault contents stay on your device.

No data salesWe do not sell your collection information.

Ads not activeAdMob and AdSense are not currently enabled.

You stay in controlConsent and tracking choices can be changed.

1. Scope

This policy applies to the Flosna Vault mobile application, the Web Vault, and this website. It explains information handled directly by us and information that may be processed by advertising providers such as Google. Advertising providers do not receive access to the contents of your vaults merely because their advertising technology is present.

2. Collection data stays local

Vault names, items, values, notes, custom fields, and item photos are stored locally on your device. The Web Vault stores its data in your browser. We do not require an account and do not upload this collection content to our servers during normal use.

We do not sell your collection data.
We do not use collection contents to personalize advertising.
We do not give Google, Apple, or advertisers access to your vaults or item photos.
Deleting the app or clearing browser storage may delete local data unless you created a backup.

3. Backups, photos, and device permissions

If you choose to add or capture photos, the app uses the permission only to perform the feature you requested. Exported backups are saved to a location you select. Cloud-storage or sharing providers you choose process those files under their own privacy terms; we do not receive a copy simply because you export one.

4. Google AdMob in the mobile app

If mobile advertising is enabled, the app may use the Google Mobile Ads SDK (AdMob). According to Google's SDK disclosure, the SDK may automatically collect or share the following information for advertising, analytics, diagnostics, and fraud prevention:

IP address, which may be used to estimate general location;
app interactions such as app launches, taps, ad impressions, or video views;
diagnostic and performance information such as crash, hang, and launch data; and
device or account identifiers, which may include an advertising identifier where permitted.

This advertising data is separate from your vault contents. Google states that Mobile Ads SDK data is encrypted in transit. Details can change with SDK versions, so see Google's current Mobile Ads SDK data disclosure and Google Privacy Policy.

5. Apple iOS privacy and App Tracking Transparency

On iOS, we will describe the data practices of both Flosna Vault and integrated third-party SDKs in App Store Connect. If an advertising feature would track you across apps or websites owned by other companies, the app will request permission through Apple's App Tracking Transparency (ATT) prompt before accessing the iOS advertising identifier or enabling that tracking. Declining ATT will not block core app functionality.

We will not present our own screen as a substitute for Apple's ATT permission.
We will not fingerprint your device to bypass your ATT choice.
We will not make access to core features conditional on allowing tracking.
You can change tracking permission in iOS Settings → Privacy & Security → Tracking.

Learn more from Apple about app tracking controls and App Store privacy details.

This website does not currently display AdSense ads. If AdSense is activated, Google and participating vendors may use cookies or similar technologies to serve, limit, measure, and personalize ads. Google's advertising cookies can allow Google and its partners to serve ads based on visits to this site and/or other sites on the internet.

Before optional advertising storage or personalized advertising is used where consent is required, visitors will be shown an appropriate consent interface. You may control Google personalized advertising through My Ad Center. See also Google's advertising technology explanation.

Where required in the EEA, United Kingdom, and Switzerland, we will use a Google-certified consent management platform and obtain the required choices before requesting personalized ads. Depending on the choice and available ad inventory, the app or site may show personalized, non-personalized, or limited ads, or no ad. Non-personalized or limited ads can still process information such as IP address for delivery, security, and fraud prevention.

Where applicable US state privacy laws provide opt-out rights, we will provide or honor the required controls and supported privacy signals for targeted advertising, sale, or sharing. Advertising consent and privacy choices will be available from the app's Privacy & Ads settings and, if AdSense is activated, from a website privacy-choices link.

8. Purposes and legal bases

Depending on your location and the feature involved, information may be processed:

with your consent, such as personalized advertising or optional device permissions;
to provide a feature you request, such as saving an item or exporting a backup;
for legitimate interests such as security, fraud prevention, diagnostics, and service improvement; or
to comply with legal obligations.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

We may use providers necessary to operate or secure the website and, once enabled, Google advertising services. These providers process information for the purposes described above under their agreements and privacy terms. We may also disclose information if legally required or necessary to protect users, the service, or others. We do not sell your vault contents.

10. Retention and security

Local collection data remains on your device until you delete it, clear the relevant app or browser storage, or restore different data. Third-party advertising providers determine retention for information they process under their policies and your settings. We use reasonable technical and organizational safeguards, but no storage or transmission method can be guaranteed completely secure.

11. Children's privacy

Flosna Vault is not directed to children under 13, or the higher minimum age required in their country. We do not knowingly collect personal information from children. Advertising, if enabled, will be configured in accordance with applicable child-directed-treatment and age-related requirements. Contact us if you believe a child provided personal information.

12. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, withdraw consent, or appeal a decision. Most vault information is held only on your device, so you control it directly and we cannot retrieve data we never received. For information processed by Google, use Google's privacy and advertising controls or contact Google directly.

13. International processing

Advertising and infrastructure providers may process information in countries other than your own. Where required, providers use recognized transfer mechanisms and safeguards as described in their privacy documentation.

14. Changes to this policy

We will update the date above when this policy changes. Before AdMob or AdSense is enabled, we will revise the current-status notice and ensure the app's consent screens, Apple App Privacy answers, Google Play Data safety disclosure, and this policy describe the same practices.

15. Contact

For privacy questions or requests, email myvault66@gmail.com. To protect users, we may need to verify a request before acting on it.