VaultMate collects no user data whatsoever.

The extension communicates exclusively with the VaultMate desktop application installed on the user's own computer via the browser's Native Messaging API (local stdio pipe). No data is transmitted to any external server, cloud service, or third party.

No telemetry, analytics, crash reports, or usage statistics are collected or transmitted. All credentials and cryptographic keys remain on the user's local machine at all times, encrypted at rest using AES (Fernet) with a PBKDF2-derived key.

Source code is available at: https://github.com/webtech781/vaultmate-gui