BLUE LOCK PASS

INITIALIZING CRYPTO NODE...

ZERO-KNOWLEDGE0%

BLUE LOCK PASSSYSTEM LOCKED || ZERO-KNOWLEDGE

ZERO-KNOWLEDGE PRIVACY GUARANTEE

PRIVACY POLICY

Effective: January 1, 2026•Version: v2.4.0 (Zero-Knowledge)

Zero-knowledge privacy & encryption guarantees

End-user agreement & vault custody rules

Cookie Policy

Essential session state & local storage

DMCA Notice

DISCLAIMER

Blue Lock Pass is an independent project and is not affiliated, associated, authorized, endorsed by, or in any way officially connected with the “Blue Lock” anime, manga, or its creators (Muneyuki Kaneshiro, Yusuke Nomura, Kodansha).

Document Sections

Security Inquiry or Data Clearance?

Contact Security Desk

Zero-Knowledge Cryptographic Principle

Blue Lock Pass operates under a strict, uncompromised Zero-Knowledge Cryptographic Architecture. We do not store, inspect, log, or hold access keys to your Master Password or unencrypted vault credentials under any circumstances.

All cryptographic operations—specifically PBKDF2 key derivation (600,000 iterations) and AES-256-GCM symmetric encryption/decryption—take place entirely on your client device inside your browser's Web Crypto API memory space before any byte payload leaves your machine.

Client-Side Isolation Guarantee: Unencrypted data never touches our network or servers.

Data Payload & Account Metadata Collection

Because all sensitive vault credentials are encrypted on your local hardware prior to transmission over TLS 1.3, Blue Lock Pass only stores the minimum metadata required to deliver secure authentication:

Account Identity: Your registered email address, subscription tier, and master password salt.
Encrypted Vault Payload: Ciphertext bytes, initialization vectors (IVs), and authentication tags encrypted via AES-256-GCM.
Authentication Credentials: Password verification hashes salted via Argon2id and registered WebAuthn / FIDO2 passkey credentials.
Security Telemetry: Transient single-use OTP codes sent via SMTP for multi-factor authentication and login verification.

Prohibition of Data Monetization & Ad Tracking

We maintain a zero-monetization stance on user metadata. We do not sell, rent, license, or share user activity, IP addresses, or metadata with third-party advertising networks, data brokers, or external analytics firms.

Blue Lock Pass does not run invasive tracking pixels, cross-site behavioral scripts, or commercial ad networks. Your security and privacy take absolute precedence.

Database Isolation & Transit Security

All stored ciphertext records are protected by strict MongoDB access control policies and encrypted in transit via forced TLS 1.3 encryption. Server access is restricted to verified administrators and monitored via immutable audit logs.

Data Retention & Account Purge Rights

You maintain total authority over your account data. At any time, you may request permanent deletion of your account and encrypted vault records.

Account Purge Protocol: Deleting an account permanently wipes all associated vault ciphertexts, passkeys, and logs from our database.

Security Contact & Compliance Officer

If you have questions regarding this Privacy Policy, compliance audits, or security vulnerabilities, contact our lead security administrator:

Email: info@alrifatsabbir.me

Zero-Knowledge Legal Integrity Assurance

Blue Lock Pass is strictly engineered so that all cryptographic keys stay in client memory. No operator, administrative staff member, or third-party entity can access or decrypt user data without the client's Master Password.