Help

Privacy

What Fovea stores for your account and sync, and what it never reads.

Fovea is built to hold as little as possible and to keep sensitive data opaque.

What is stored

• Your account email and a one-way hash of your password — never the password itself.
• OAuth tokens as one-way hashes, never the raw tokens.
• Your synced browser data, isolated to your account.

What is never read

Saved passwords and encrypted autofill are stored as opaque encrypted bytes. The service does not decrypt, log, or store their plaintext.

Account isolation

Access is keyed strictly to your authenticated account. The service ignores client-supplied account identifiers, so one account can never reach another’s data.

Removing data

Signing out a device revokes that device’s access from your Account page. Fovea can also clear server-side sync data, which removes the stored sync entities, progress, and key material for your account.

What we log

Operational logs record request metadata such as a request id and the result of an action. They do not contain your passwords or the plaintext of encrypted sync payloads.