Privacy policy
Last updated: 25 September 2026
This is a translation for convenience. The Spanish version prevails in case of discrepancy.
Forgetmykey is designed to know as little about you as possible. This policy explains what data is processed, in accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
[Owner name: pending] · [Tax ID (NIF): pending] · [Address: pending] · [Contact email: pending]
2. What data we process
| Where | Data | Purpose |
|---|---|---|
| Website forgetmykey.com | None. There are no forms and no analytics or advertising cookies. | — |
| App app.forgetmykey.com | A random account identifier, the public key of your passkey and your encrypted keys, which we cannot read. We do not ask for your name, email or phone number. | Providing the service of saving and retrieving your keys. |
| Servers (Cloudflare) | Technical connection data, such as the IP address, processed by the provider for security and operation. | Protecting the service against abuse and attacks. |
3. Legal basis
Performance of the service you request by using the app (art. 6.1.b GDPR) and the legitimate interest in keeping the service secure (art. 6.1.f GDPR).
4. How long
Your encrypted data is kept for as long as you keep your keys in the app. You can delete each key from the app at any time. Technical sign-in data is deleted within minutes.
5. Who else is involved
Hosting is provided by Cloudflare, Inc., as data processor. Cloudflare may process technical data outside the European Economic Area with the safeguards provided by the GDPR (EU-US Data Privacy Framework and standard contractual clauses). We do not share or sell data to third parties.
6. Security
Your keys are encrypted on your phone with a key derived from your own phone's unlock (passkey), split into two encrypted halves, and always travel over a secure connection (HTTPS). Neither the owner nor the provider can read their content.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [Contact email: pending]. If you believe they have not been properly handled, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).