Offline · air-gapped · one-time purchase
Zero-Cloud Vault is a local-first encrypted vault for Windows and Android. Files, notes, passwords and photos are sealed on your device with ChaCha20-Poly1305 under an Argon2id-derived key, and the only way data leaves is optically — self-healing RaptorQ frames rendered as QR codes and read by a camera, device to device, with no cable, no Wi-Fi, no Bluetooth and no account. Buy the binary, own it. No subscription, no licence server, no telemetry.
Windows 10/11 · Android 7+ · 3.0 MB installer · 236 tests in the build · every claim below is checkable against the binary
A random data key encrypts everything. Your master password derives a root key with Argon2id (64 MiB, 3 passes, once per unlock) and each unlock slot is wrapped with HKDF under the vault-wide salt. The header, KDF parameters and slot index are authenticated as associated data in every slot, so a downgraded header or a swapped slot simply fails to open.
The vault file is SQLite, WITHOUT ROWID, so there is no hidden rowid leaking insertion order. Item sizes are padded into fixed buckets and the item table carries no plaintext. Chaff rows are byte-identical to real ones. Destroy every slot and the contents are gone — that is crypto-shredding, with the storage-layer caveats stated openly below.
Transfers are RaptorQ fountain-coded frames (RFC 6330) shown as QR codes on one screen and read by the other camera. A lost frame costs nothing — any sufficient subset decodes. Nothing is negotiated over a network because there is no network transport in the binary: no HTTP client, no sockets, no updater.
Two devices, two vaults, one optical channel. There is no sync server, because there is no server.
The features are the boring ones. The point is that the file on your disk is the only copy, and it does not need a company to stay alive.
Logins, recovery codes and the answers to security questions, one item per entry, copied to the clipboard and wiped after thirty seconds — and only if the clipboard still holds it. No browser extension, no vault-in-the-cloud, no breach notification email because there is no server to breach. Back it up by exporting the encrypted file, or by moving entries device-to-device over the QR channel.
Passport scans, insurance paperwork, tax records and the photographs you would not put in a consumer cloud. Files are padded into fixed size buckets before encryption, so the shape of the ciphertext does not advertise what kind of document it is.
Estate instructions, account recovery codes, the combination to a safe, the location of a physical backup. One master password, one file, and a destruction code that makes the whole thing unreadable if you are ever forced to open it.
One $49 licence covers the Windows installer and the Android APK. Not one per device — one per person.
Privacy pages are cheap. These three are the properties we will defend in writing — zero network code, CSP locked, OS screenshot blocking — and each is visible in the artifact you receive, not just asserted on a website.
No third-party security audit has been published for 1.0.0. If an audit matters more to you than the price, wait for 1.1 — do not take our word for it.
The honest half of the threat model. Anyone selling you an air-gapped vault without this list is selling you a feeling.
$49one-time
DRM-free binaries for Windows and Android, one licence per person, free 1.x updates. No activation, no phone-home check, no expiry. Both files are delivered from this server with published SHA-256 hashes.
Solana mainnet · USDC
8JUEoHNMbWM4eegcMvx6ZQJt3V3fbo8JNjpWiCtJgxfFUSDC on Solana only. A native SOL transfer carries no token balance to match and cannot be verified automatically — if you send SOL by mistake, email the signature and we will sort it out by hand. The merchant address is published so you can check it before you send: it is the same one on every order.
You should not trust it on our word. The architecture is described precisely enough to argue with, the claims above are checkable against the binary, and the limits are printed on the page instead of buried. What is missing is an independent audit; that is stated plainly rather than implied away.
Not in 1.0.0. Selling DRM-free binaries means anyone can copy them; withholding the source is the only remaining moat while the product is new. A paid source licence is planned for a later release.
No, and we say so on purpose. A seed phrase is the one secret where a mistake is unrecoverable and gets blamed on the app: typed into a general-purpose operating system, it is exposed to a keylogger, a clipboard sniffer, a malicious keyboard or a camera in the room. Twelve or twenty-four words belong on steel or in a hardware wallet. This vault is for the secrets you can afford to lose one of, not the ones that end you.
Nothing recovers it. There is no reset, no recovery key escrow and no support path — that is the point of the design. The emergency-codes and destruction-code features are deliberate alternatives, and both are documented in the manual that ships with the installer.
None on a delivered binary paid in crypto — the transaction is final and we cannot reverse it. Read the limits section first. If it does not do what this page says, email and we will fix it or refund in USDC.
No. Windows and Android in 1.0.0. Two platforms is already two products to support; a macOS build is a later decision, not a promise.
In the US, mass-market encryption is exportable under EAR 740.17(b)(1) with an annual self-classification report; this is a notification duty, not a prohibition. Buyers in sanctioned jurisdictions are not served.