We store only what we need to run your locks: your account email, your locks and their (hashed) codes, and anonymous attempt counts. Lock codes are stored as bcrypt hashes and never exposed to the browser. This is a placeholder privacy page for the demo deployment.