When you connect Strongbox to a cloud storage provider, information is exchanged to sign you in, locate your database and keep it synchronised.
This article covers database storage services such as Google Drive, Dropbox, OneDrive and Strongbox Sync. Purchase, upgrade-screen and crash-reporting services are described separately in our Privacy Policy.
Your encrypted database
Strongbox reads and writes your database in its encrypted file format. Your storage provider stores the encrypted file, rather than receiving your master password to unlock it.
The provider may also process file information needed to operate its service, such as filenames, file sizes, modification times and version history.
Account and connection information
Depending on the provider and integration, Strongbox may receive account information such as your email address, account name or account identifier, together with the authorisation tokens needed to access your files.
The provider can also receive normal connection information, such as your IP address, request times and information identifying Strongbox as the application making the request.
The exact information and permissions depend on the provider. You can review the permissions when authorising Strongbox and manage or revoke access through the provider's account settings.
Strongbox Sync
Strongbox Sync uses Apple's CloudKit infrastructure and your Apple account. It does not require a separate Strongbox account.
Your database is stored in its encrypted file format. Strongbox Sync also stores metadata, including the database nickname and modification timestamp, using CloudKit's encrypted fields.
Files, iCloud Drive and other sync applications
If you open a database through Apple's Files app or a folder managed by another sync application, the operating system or that application may handle the connection to the storage provider.
That service's permissions, settings and privacy policy apply to the synchronisation it performs.
Does the Strongbox team receive my cloud database?
Using a storage integration does not send your database to our support team or give us your master password. We cannot reset your master password or decrypt your database without the required credentials.
Information you choose to send us separately, such as support messages or attachments, is handled as described in our Privacy Policy.
Can I avoid cloud storage?
Yes. You can keep your database locally instead of connecting it to a cloud provider.
Local database storage does not automatically disable other connections made by the regular app, such as purchase management or crash reporting. See What Network Connections Can Strongbox Make? for those details.