Andromeda Vault Cloud v1.2 · Andromeda Aerospace · 8 October 2026
File contents and filenames are encrypted on your device using AES-256-GCM. Your vault password wraps a random master key with PBKDF2-SHA-256 at 600,000 iterations. Each file has its own random key; encrypted chunks authenticate file identity, size and order. We do not receive your vault password or decrypted file contents. Email account recovery cannot recover a lost vault password.
The web application delivers the encryption code to your browser or the installed Windows/Linux app. The desktop app uses the same cloud service and account. Its native save dialog writes decrypted downloads to the location you choose. Optional folder syncing keeps ordinary decrypted copies in your chosen folder and saves local file paths, hashes and sync progress in the application settings on this computer. Your operating-system account and disk protection control access to these local files. Sync runs while the app is open and the vault is unlocked; it pauses on lock and resumes after you unlock. This release has not had an independent security audit. Keep a separate backup, save your vault password safely, and test a download before relying on the service. Locking releases keys and decrypted filenames from this workspace; browser memory erasure cannot be guaranteed. Downloaded files are no longer protected by Vault.
We store your sign-in email, account identifier, subscription and payment references, encrypted master-key envelope, encrypted file contents and filenames, file sizes, upload times, and storage usage. Infrastructure providers process connection information. Cloudflare hosts the application and private encrypted object storage. Resend delivers sign-in emails. Stripe processes payments. Card details are entered on Stripe's hosted checkout, not on our servers. The app includes no advertising trackers or third-party analytics.
100 GB costs €5.99 per month; 1 TB costs €24.99 per month. Tax is included. Plans renew monthly until cancelled through Manage billing. Cancellation takes effect at the end of the paid period. Failed payments or an ended subscription pause new uploads; existing files remain available for download and deletion. This release does not automatically delete completed files when a subscription ends. Software deployments do not cancel subscriptions, rotate your vault key, or reset account data.
Cloud storage counts encrypted bytes, including authentication overhead. GB and TB use decimal units. Each file can contain up to 2 GiB of original data, with up to 10,000 files per account. Files upload in 4 MiB encrypted chunks. Interrupted uploads are removed after 24 hours and can be restarted. The Windows and Linux desktop apps support large downloads through native saving. Browser downloads above 256 MiB require direct file saving, supported by desktop Chrome and Edge. Software files are stored as files and are not executed inside Vault. Windows and Linux support automatic folder syncing for new and changed files, with retries and conflict copies. Deletions do not automatically remove the other copy. Renames can leave the previous name stored, and retained cloud revisions count toward your storage and file limit until explicitly deleted. There is no public sharing in this release.
Use Delete beside a file to remove its encrypted stored data. Deletion is permanent. Sign out on shared devices; signing out revokes existing account sessions. Use your browser's private mode when appropriate. Never share your sign-in link or vault password. Contact keys@14d.space for account and billing help or account deletion. Support cannot decrypt your files.
Free offline encryption remains available without a subscription and uses the existing portable AVLT0001 format.