Privacy Policy

Last updated: September 4, 2026

Catpasswd ("us", "we", or "our") operates the website https://www.catpasswd.com and related recovery services (the "Service").

Catpasswd is an online platform for recovering passwords of encrypted files that you legitimately own and have forgotten how to open (for example RAR, ZIP, 7z, Microsoft Office, Excel, and certain PDF types). This page explains what information we collect, how we use it, and the choices you have.

By using the Service, you agree to this Privacy Policy. Terms used here have the same meanings as in our Terms & Conditions, unless defined otherwise below.

1. Who we are

We do not require you to create a username/password account. You submit a recovery task with an email address; that email is how you later find the task, receive notifications, and (when eligible) view a recovered password.

The Service is intended only for files you own or are authorized to recover. We do not ask you for a password you already know.

2. Information we collect

We collect the following categories of information when you use the Service.

Recovery task data

When you upload a file (or a hash / feature file produced by our extraction tool), we may store:

Email address (required, so we can notify you and so you can look up tasks)
Original file name, size, type, and a file checksum
The uploaded file, or a compact hash/feature extract instead of the original
Task identifier, status, timestamps, and language preference
IP address
Optional notes attached to the task
If recovery succeeds: the recovered password, until the task is destroyed or otherwise no longer shown

Anyone who knows the email address you submitted can list recent tasks for that address on our search page. Anyone who has the task link can open the task details. If a password is eligible to be displayed, it may be visible through those same channels. Use an email address you control, keep the task link private, and destroy the record after you have saved the password.

Notifications

Email. We send task status and result messages to the address you provided, and keep send records needed to operate those notices.
Browser Web Push (optional). If you enable the bell on a task, your browser may send us a push subscription bound to that task. We use it only to notify you about that task. You can turn it off for the current task at any time.

Payments

If you buy a paid feature (for example Professional Mode, show password, or destroy record), we create an order linked to your task. We may store order identifiers, amounts, currency, coupon codes, payment channel, and processor transaction IDs.

We do not store full payment-card numbers on our servers. Card, wallet, and checkout data are handled by the payment provider you choose (see Section 6).

If you pay with USDT, we record the details needed to confirm the payment. Blockchain transfers are public by nature.

Usage, cookies, and local storage

We collect information about how the Service is accessed, such as IP address, browser type, pages visited, date/time, language, and diagnostic data.

We use cookies and similar technologies as described in Section 5. Your browser may also keep a cookie-consent choice and a local list of tasks you created on that device.

Customer support

If you contact us by email, live chat, or otherwise, we collect whatever you send so we can help you.

Optional live chat (Crisp) loads only if you accept optional cookies, and is then subject to Crisp’s own policy as well.

3. How we use information

We use collected information to:

Provide, operate, and maintain the Service
Notify you by email and, if you opted in, by browser push
Process payments, refunds (where our Terms allow), coupons, and accounting
Provide customer care
Detect, prevent, and address abuse, fraud, and technical issues
Improve the Service (including optional analytics if you accepted it)
Comply with law and enforce our Terms

We do not sell your personal information. We do not use recovered passwords for advertising.

4. Uploaded files and recovered passwords

We use your upload only to provide password recovery. You may instead upload a hash/feature file from our extraction tool so the original archive or document need not leave your computer. See our help pages for details.

After a successful recovery we recommend that you save the password and destroy the task. Destroy files record permanently deletes the stored file and the task record. This cannot be undone. Payment records needed for accounting may be retained.

Task pages available on the site generally cover tasks created within the last 365 days. Destroyed tasks are removed from search and detail views.

We never ask you to submit a password you already know. Do not upload files you are not authorized to recover.

5. Cookies and similar technologies

Cookies are small files stored on your device. Tracking technologies such as scripts may also be used.

When you first visit, we show a cookie notice.

Essential cookies are required for the Service to work (security, session, and language preference). They do not depend on the banner.
Optional technologies — Google Analytics (usage analytics) and Crisp (live chat) — load only if you choose Accept. If you choose Reject, we do not load those scripts. You can change your choice at any time via Cookie settings in the website footer.

You can also instruct your browser to refuse cookies. If you refuse essential cookies, parts of the Service may not work.

Examples we use:

Session cookies. To operate the Service.
Preference cookies. Language and similar settings.
Security cookies. For security purposes.
Analytics / chat (optional). Google Analytics and Crisp, only after you accept optional cookies.

6. Payments

Paid features currently offered on the site include showing a recovered password, upgrading to Professional Mode, and destroying a task record. Prices and refund rules are described on the site and in our Terms.

Depending on what you select at checkout, payment may be processed by Alipay, WeChat Pay, PayPal, USDT, Creem, Paddle, or Dodo Payments (Apple Pay, Google Pay, Visa, and other methods the checkout may offer). We may add, remove, or change processors.

Each processor receives the data needed to complete the payment and operates under its own privacy policy. We receive confirmation and identifiers, not your full card number.

Refunds, where eligible, are handled as described in the Terms.

7. Service providers

We may employ third parties to help operate the Service (for example hosting, email, payments, optional analytics, and optional live chat). They have access to personal data only to perform these tasks on our behalf and are not authorized to use your recovery files or recovered passwords for their own marketing.

Analytics (optional)

Google Analytics is offered by Google. If you accepted optional cookies, Google may collect usage data as described in the Google Privacy Policy. You can also use the Google Analytics opt-out add-on.

Live chat (optional)

Crisp provides optional live chat. If you accepted optional cookies, Crisp’s practices apply in addition to this policy: https://crisp.chat/en/privacy/.

8. How long we keep data

We keep information as long as needed to provide the Service, meet accounting and legal duties, and resolve disputes.

Task pages on the site generally cover the last 365 days. Destroy files record deletes the file and the task; related payment records may be retained. Optional analytics and chat follow those providers’ settings.

If you want deletion beyond what Destroy files record does, contact us (Section 15). We may retain information we must keep by law or for security.

9. Transfer of data

Your information, including personal data, may be transferred to and processed in locations other than your own, where data-protection laws may differ. By using the Service and submitting information, you understand that transfer. We take reasonable steps so that such processing remains consistent with this policy.

10. Disclosure of data

We may disclose personal data when we believe in good faith that it is necessary to:

Comply with a legal obligation or lawful request
Protect and defend the rights or property of Catpasswd
Prevent or investigate possible wrongdoing in connection with the Service
Protect the safety of users or the public
Protect against legal liability
Complete a merger, acquisition, or sale of assets (in which case we will require the successor to honor this policy or give notice of changes)

We may share data with the service providers in Section 7 as needed to operate the Service.

11. Security of data

The security of your data is important to us, but no method of transmission or storage is 100% secure. We strive to use commercially reasonable means to protect personal data, and we cannot guarantee its absolute security.

Because tasks can be found by email or task link, the practical security of a recovered password also depends on you: use an email you control, do not share the task URL, and destroy the record after you have the password.

12. Your choices

You can:

Look up your recent tasks on the search page with the email you used
Open a task by its link and, when eligible, view the password
Purchase Destroy files record to delete the file and task
Enable or disable browser push per task
Accept or reject optional cookies, and reopen Cookie settings in the footer
Contact us to ask questions, request a copy of data we hold about you, or ask us to delete remaining records (subject to law and the limits in Section 8)

If you are in a jurisdiction that grants additional privacy rights, contact us and we will consider the request as required by applicable law.

13. Children's privacy

The Service is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has submitted data, contact us and we will take steps to delete it.

By using the Service you represent that you are at least the age of majority in your jurisdiction, as stated in our Terms.

14. Links to other sites

The Service may contain links we do not operate. Their privacy practices are their own. We are not responsible for third-party sites or services.

15. Changes to this Privacy Policy

We may update this policy from time to time. We will post the new version on this page and update the date at the top. Where required, we may also notify you by email or a notice on the Service.

Changes take effect when posted on this page. Please review this policy periodically.

16. Contact us

Questions about this Privacy Policy:

Email: service@catpwd.com
This page: https://www.catpasswd.com/privacy
Address: Huzhuang Town, Puyang City, Henan Province, China