Privacy

Effective 2026-06-06

This policy covers the Tokn app and this website. Tokn is a free service from DiamondForge Labs (the “Service Provider”), provided as is. The app is built so there is nothing to collect. The website uses privacy-friendly, self-hosted analytics.

Responsible party

The controller for the processing described here is the site operator named in the imprint, where you also find the contact details.

What the app collects

The Application does not obtain any information when you download and use it. No registration or account is required.

• No account. You never sign up or log in. There is no Tokn server.
• No analytics or telemetry. The app does not track usage and ships no ad or analytics SDKs. It does not use Google Play Services.
• Your data stays on your device. Accounts and secrets live in an SQLCipher-encrypted database on your phone. Codes are generated locally and the app works fully offline.
• Backups and sync are yours. Encrypted backups are written where you choose. Device-to-device sync happens directly between your phones over the local network and is end-to-end encrypted. Nothing passes through us.
• No location. The app does not collect precise location information from your device.

The app requests only the permissions it needs:

• Camera to scan QR codes when adding an account or syncing.
• Internet (optional, off by default) only if you opt in to fetching service icons.
• Biometric to unlock the vault.

This website

Privacy-friendly analytics. This site uses Umami, a self-hosted, cookieless analytics tool running on our own infrastructure at analytics.diamondforge.me. It records aggregate, anonymous visit statistics such as page views and referrers. It sets no cookies, builds no profile of you, and your data is never sold or shared with advertisers. There is no session replay and no cross-site tracking.

Legal basis, IP handling, and retention. We process this data based on our legitimate interest in measuring how the site is used (Art. 6(1)(f) GDPR). Umami does not store your raw IP address; it derives an anonymous identifier from a rotating hash, so visits cannot be traced back to you. These aggregate statistics are kept only as long as they are useful for this purpose and are never linked to other data.

Self-hosted fonts. Fonts are served from the site itself, not a third party.

Outbound links. Buttons to Google Play, F-Droid, and GitHub take you to those services, which have their own privacy policies.

Third parties

The app does not collect any information, so nothing about the app is shared with third parties. The website analytics described above run on our own self-hosted infrastructure, so visit data is not handed to a third-party analytics provider.

Your opt-out rights

The app collects nothing, so there is nothing to opt out of or delete. For the website, you can block the analytics with your browser settings, a content blocker, or by sending a Do Not Track signal.

Your rights

Since the website stats are anonymous and the app stores nothing on our side, there is usually no personal data we could give you access to, correct, or delete. Where data protection law applies regardless, you have the rights to access, rectification, erasure, restriction, and objection, and you may lodge a complaint with a supervisory authority, for us the Bavarian State Office for Data Protection Supervision (BayLDA).

Children

Tokn is not directed at children, and there is nothing for a child, or anyone, to hand over: the app has no account, no forms, and no server, so no personal data can be submitted through it. The website only keeps anonymous, aggregate statistics.

If you have any questions about this, reach us at click to reveal email.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The app collects nothing, and the website holds only aggregate, anonymous statistics, so there is no personal data store to expose.

Changes

This Privacy Policy may be updated from time to time for any reason. We will notify you of any changes by updating this page with the new policy and effective date. You are advised to review this page regularly, as continued use is deemed approval of all changes.

Your consent

By using the Application, you consent to the processing of your information as set out in this Privacy Policy, now and as amended by the Service Provider.

Contact

If you have any questions about privacy or these practices, email us at click to reveal email. For bugs or feature requests, open an issue on GitHub.