1. Overview & Commitment to Privacy
This Privacy Policy describes how Suraksha ("the Application", "we", "our", or "us"), developed by Dheeraz under the YABP Initiative (Yet Another Boring Project), handles information when you install and run Suraksha on Windows 10, Windows 11, or Windows Server systems.
Suraksha is an open-source, privacy-first Windows application locker and session security tool designed to protect your sensitive desktop applications behind custom master passcodes and native Windows Hello biometrics/PINs.
2. Data Collection and Usage
Suraksha collects ZERO personal data. Specifically:
- No Personal Identifiable Information (PII): We do not collect names, email addresses, IP addresses, location data, device identifiers, or biometric profiles.
- No Telemetry or Tracking: Suraksha contains no analytics frameworks, crash reporting beacons, background telemetry pings, tracking cookies, or advertising SDKs.
- No Cloud Data Storage: Suraksha has no remote servers, databases, or cloud endpoints. All configuration policies and locks exist strictly on your local physical device.
3. Local Device Data & Encryption
Suraksha processes certain technical configuration elements strictly on your local machine to provide core app-locking features:
- Protected Applications Policy: The list of executable paths you choose to lock is stored in a local configuration file in your user profile directory (
%APPDATA%\Suraksha\config\settings.json). - Master Passcode Security: When you create a custom master passcode, it is hashed with a cryptographic salt using SHA-256 and secured via the Windows Data Protection API (DPAPI) (
CryptProtectData). Passcodes are never stored in plaintext and cannot be recovered if forgotten. - Local Security Audit Log: Security events (e.g., successful unlocks, failed attempts, hotkey activations) are appended to a local text file at
%APPDATA%\Suraksha\logs\audit.log. This log remains exclusively on your storage drive and can be cleared or reviewed by you at any time.
4. Windows Hello & Credential Management
When you enable Windows Authentication or Windows Hello:
- All biometric and PIN verification is executed directly by the operating system kernel via official Microsoft CredUI APIs (
CredUIPromptForWindowsCredentialsW). - Suraksha never sees, receives, captures, or caches your Windows account password, PIN, fingerprint, or facial recognition templates.
- Suraksha only receives a boolean success/failure signal from Windows User Account Security to permit or restrict app access.
5. Process Monitoring & Windows Permissions
To detect when locked applications launch, Suraksha registers lightweight operating system hooks (SetWinEventHook) and reads active process identifiers in memory via Toolhelp32 APIs (CreateToolhelp32Snapshot).
This in-memory state inspection is performed strictly on your local CPU to intercept and hide target window handles. No memory contents, window text, keystrokes, clipboard contents, or application data are ever read, recorded, or intercepted.
6. Third-Party Sharing & Network Access
Suraksha does not transmit any network packets and has zero inbound or outbound network connectivity during standard operation. We do not partner with third-party data brokers, advertising networks, or analytics services.
7. Microsoft Store & Developer Compliance
This privacy policy adheres to the Microsoft Store App Developer Agreement and the Windows App Certification Kit guidelines regarding user privacy, data transparency, and security disclosure.
8. Open Source Code Transparency
Suraksha is free and open-source software licensed under the GNU General Public License v3.0 (GPLv3). You are welcome to inspect, audit, build, and verify the entire C++ source code independently on GitHub:
https://github.com/dheeraz101/Suraksha
9. Contact & Inquiries
If you have any questions or feedback regarding this Privacy Policy, please contact the developer:
- Developer: Dheeraz
- Developer Website: https://dheeraz.dpdns.org/
- Initiative: Yet Another Boring Project (YABP)
- GitHub Issues: Suraksha Issue Tracker