Privacy Policy
Arancia · arancia.si, Arancia Mail, Arancia Pass and Arancia 2FA · Last updated: 22 October 2026
This page explains what data Arancia handles, where it goes, and your choices. In short: this website collects nothing, and your passwords, passkeys, profiles and 2FA secrets are stored on your computer, encrypted, where we cannot read them. We do not sell data, show ads, or use analytics or tracking.
1. Who we are
Arancia is operated by ARANCIA LLC (a New Mexico limited liability company), 8206 Louisiana Blvd NE, Ste A #11119, Albuquerque, NM 87113, United States (“Arancia”, “we”, “us”). ARANCIA LLC is the controller of the personal data described on this page.
2. This website (arancia.si)
- No analytics, no tracking, no advertising and no cookies.
- No forms and no accounts: the site does not ask for any personal data.
- No third-party scripts, fonts or embeds. Everything is served from arancia.si.
The site is hosted on Cloudflare. Like any web host, Cloudflare processes connection data (such as your IP address and browser type) to deliver and protect the site, under the Cloudflare Privacy Policy. We do not keep our own visitor logs.
Links to other sites (for example X or aranciamail.com) are covered by those sites’ own policies once you follow them.
3. Arancia Mail
Arancia Mail is an email client, not an email host: we do not host your mailbox. It has its own privacy notice at aranciamail.com/privacy, which covers the aranciamail.com waitlist today and will cover the app as it launches.
4. Arancia Pass
A password manager for Chrome.
Stored on your computer
Logins, passkeys, sign-up profiles (for example name, email, phone, address) and “my passwords” are kept in your Chrome profile. Each item is encrypted with AES-256-GCM using a random vault key. That key is protected by a key derived from your master password (PBKDF2-SHA256, 600,000 rounds). Your master password is never stored and never sent anywhere.
Optional unlock methods stay on your computer too: a device passcode (wraps the vault key locally) and Touch ID (the key is released by your Mac’s secure hardware after your fingerprint). Neither is synced or uploaded.
On websites
To fill forms, Arancia Pass reads the login and sign-up fields of the pages you visit (secure https pages, plus localhost for developers). It only fills a password, passkey or profile after you click, and only for the site it was saved for. Page content is not collected, stored or sent anywhere. When you sign in with a saved passkey, the website receives the standard WebAuthn response that any passkey would give it.
Optional sync (pass.aranciamail.com)
Sync is off unless you create an account. If you turn it on, our server (Cloudflare Workers and Cloudflare D1 database, operated by Cloudflare, Inc. on our behalf) stores:
| Data | Why | Readable by us? |
|---|---|---|
| Your email address | Account sign-in and important account messages | Yes |
| Encrypted vault items and the encrypted vault key | Copy your vault to your other computers | No – encrypted on your device before upload |
| Key-derivation settings (salt, rounds) and a slow hash of a login key derived from your master password | Check your sign-in without ever receiving your master password | No – cannot be turned back into your password or keys |
| Device names (e.g. “Chrome on Mac”), sign-in times, hashed session tokens | Show and revoke your signed-in devices | Yes |
| IP address and email in short-lived rate-limit counters; failed sign-in counts | Stop password-guessing and abuse | Yes, kept only for the rate-limit window (minutes to an hour) |
The server does not log request contents. Cloudflare processes connection data (such as IP address) to deliver and protect the service, under the Cloudflare Privacy Policy.
5. Arancia 2FA
An authenticator for one-time codes, for Chrome.
Your accounts and 2FA secrets are stored in your Chrome profile. If you set a lock, they are encrypted with AES-256-GCM (PBKDF2-SHA256, 600,000 rounds), or unlocked with Touch ID. Without a lock they are stored unencrypted in your Chrome profile, and the extension warns you about this. Arancia 2FA has no account and no sync; exports are files you save yourself.
Arancia 2FA makes these network requests, none of which include your secrets or codes:
| Service | What is sent | Why |
|---|---|---|
jsDelivr CDN (cdn.jsdelivr.net, Simple Icons) | The name of a logo (for example “github”), plus your IP address as part of any web request | Show service logos. Logos are cached on your computer. |
Cloudflare (www.cloudflare.com/cdn-cgi/trace) and timeapi.io | A plain time request, plus your IP address | Check that your computer clock is right, since codes depend on it |
| Chrome’s own favicon cache | Nothing leaves your computer | Show website icons |
The optional “setup helper” (off by default, needs your permission) looks for 2FA QR codes and otpauth:// links on the page you are on, so you can add them in one click. Nothing is sent anywhere. The QR scanner takes a picture of the visible tab only when you ask it to, and it is processed on your computer.
6. What we do not do
- No analytics, advertising, tracking pixels or selling of data.
- Data is not used for anything except the features described here. It is not used for creditworthiness or lending, and not transferred to data brokers.
- No remote code: all extension code ships inside the extension package.
The use of information received from Google APIs and Chrome will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
7. Your choices and rights
- Delete local data: remove the extension from Chrome; this deletes everything it stored on your computer.
- Delete your sync account: Arancia Pass → Settings → Sync → Delete account. This immediately erases your email, encrypted items and devices from the server.
- Export: both extensions can export your data (encrypted backup or CSV / 2FA export).
- If you live in the UK or EU, you have rights to access, correct, delete and port your data, and to complain to a data protection authority (in the UK: the ICO). Write to us to use them.
8. Security
Everything is encrypted with WebCrypto on your device. Connections use HTTPS. Sync sessions use short-lived tokens with rotating refresh tokens, and you can revoke any device. No system is perfect: if you forget your master password, nobody (including us) can recover your vault.
9. Children
These extensions are not directed at children under 13 (under 16 in the EU) and we do not knowingly collect their data.
10. Changes and contact
We will update this page when our products change how they handle data, and change the date above.
Questions or requests: privacy@aranciamail.com.
Post: ARANCIA LLC, 8206 Louisiana Blvd NE, Ste A #11119, Albuquerque, NM 87113, United States.