Terms & Conditions

These terms are a contract between you and the Opaque team ("Opaque", "we", "us"). By creating an account or using the Opaque web application or its API, you agree to these terms and to the Privacy Policy, which describes what we store and what we can never see.

If you do not agree with something here, the honest advice is simple: do not use the service. Nothing in these terms limits rights you have under law that cannot be waived.

Opaque is a zero-knowledge password manager. Your secrets are encrypted inside your browser before they reach us; we store, sync, and return the encrypted result. Two consequences of that design are part of this agreement, not just the marketing:

• We cannot read, search, or restore the contents of your vault, and we cannot reset access to it. There is no backdoor for support, for us, or for anyone else.
• Features that would require our servers to read your secrets in plaintext are out of scope by design. We will not build them, even on request.

You sign in through our authentication provider, Clerk. You agree to provide accurate information, keep your account email current (it is how we deliver notices under these terms), and keep your sign-in credentials to yourself. You are responsible for activity that happens under your account and on the devices where you unlock your vault.

You must be at least 13 years old — or the higher minimum age required where you live — and legally able to enter into this agreement. One account is for one person.

This is the most important section of these terms. When you set up your vault, your browser generates a master password wrapper and a 12-word recovery phrase. We never receive either. By using Opaque, you acknowledge and accept all of the following:

• You are solely responsible for remembering your master password and for storing your recovery phrase safely — ideally offline.
• If you forget your master password, the recovery phrase is the only way back into your vault. If you lose both, your encrypted data is permanently unrecoverable — by you, by us, by anyone. You accept that this is an intended property of a zero-knowledge service, not a defect in it.
• Anyone who obtains your recovery phrase together with access to your account can unlock your vault. Guard the phrase like cash; if you believe it has been exposed, treat the vault as compromised and rotate the credentials stored inside it.

How this works under the hood is described in the zero-knowledge documentation.

Each plan includes a maximum number of vault items. The limit is enforced at the moment you save a new item — atomically, so it cannot be raced past — and once you reach it, new saves are declined until you delete items or move to a plan with more room. Existing items are never touched by a limit check.

Where paid plans are offered, the price and billing terms shown at the time of purchase apply. We may introduce or adjust plans over time; changes that reduce what a paid plan includes will come with reasonable advance notice.

Do not use Opaque to:

• Break the law, or store content whose possession is itself unlawful. Encryption hides your data from us — it does not change your legal responsibility for it.
• Attack the service: probing or overloading endpoints, attempting to forge account webhooks, tampering with authentication, or trying to bypass plan limits or ownership checks.
• Access or attempt to access another person's account or vault.
• Resell, sublicense, or white-label the service without our written permission.

Because we cannot inspect vault contents, enforcement is based on what we can see: account behavior and non-secret metadata. You are responsible for claims and damages arising from your unlawful use of the service.

Everything you store in your vault is and remains yours. You grant us only the narrow license needed to operate the service: to store, transmit, and back up the ciphertext you send us. We claim no intellectual-property rights over your vault contents — and since we hold only ciphertext, we could not exercise any even in theory.

Feedback and suggestions you send us about the product may be used freely, without obligation to you.

Opaque is an evolving service. We may add, change, or remove features, and short interruptions can happen for maintenance or reasons outside our control. One commitment does not move: we will not change the service in a way that weakens the zero-knowledge boundary.

Plain advice that doubles as a term: for anything mission-critical, keep an independent record. No online service — ours included — should be your single point of failure.

You can stop at any time by deleting your account. Deletion removes your user record, and database-level cascades wipe your folders, items, and audit log in the same action, as described in the Privacy Policy.

We may suspend or terminate an account for a material violation of these terms, unlawful use, or conduct that puts the service or other users at risk — with notice where practicable. On termination, your data is deleted the same way as a self-deletion. Sections that by their nature should survive (such as 06, 07, 10, 11, and 12) survive termination.

The service is provided "as is" and "as available", without warranties of any kind — express or implied — including merchantability, fitness for a particular purpose, and uninterrupted or error-free operation.

In particular, and consistent with the honest limits every zero-knowledge system has, we are not responsible for loss caused by a forgotten master password combined with a lost recovery phrase; a weak or reused master password; malware, malicious browser extensions, or otherwise compromised devices; or phishing that tricks you into revealing your credentials.

To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenues, or data. Our total aggregate liability for all claims relating to the service is limited to the greater of the amounts you paid us in the 12 months before the claim arose, or [50 USD].

Nothing in this section excludes or limits liability that cannot be excluded or limited under applicable law.

These terms are governed by the laws of [your country or state], without regard to conflict-of-law rules. Disputes that cannot be resolved informally will be brought in the courts of [your venue], and both sides consent to that jurisdiction — except where the law where you live gives you the right to bring claims locally.

If these terms change, we will revise the date at the top of this page. For material changes, we will notify you in the app or by email before they take effect. Continuing to use Opaque after a change takes effect means you accept the updated terms; if you do not, stop using the service and delete your account.

Questions about these terms are welcome at legal@opaque.app. We read everything.