Legal, privacy,
threat model.
Short, because there is little to disclose. This site collects nothing; the product is designed so we hold nothing readable.
Website privacy
coldbunker.com sets no cookies, runs no analytics and loads nothing from a third party. Fonts, scripts and images are served from this domain. The only record of a visit is the web server's standard access log (IP address, requested page, browser string, time), kept for security and rotated out after a short retention period.
If you email us, we keep the email to answer it. Nothing else is collected.
Product privacy
The suite sends no telemetry, crash reports or update pings. Network traffic occurs only when you cause it: your mail server for Dispatch, an Outpost for Relay and sync, the sites you visit in Periscope. A hosted Outpost operated by Net-Com holds encrypted blobs and vault headers, never a key and never readable content; see what it holds, exactly.
Threat model, in brief
The full threat model ships with the product documentation. The summary:
- Designed against
- Anyone who obtains your device's storage while it is locked; anyone who operates or compromises an Outpost, including Net-Com; anyone who compels Net-Com to produce data; network observers between your devices and an Outpost or mail server.
- Not designed against
- Malware running inside your unlocked session; someone who knows your passphrase; weak passphrases attacked offline against a leaked vault header; traffic metadata visible to an Outpost or mail server; browser site data kept by the operating system's webview.
- Guarantee
- No system operated by Net-Com holds a key that can open a vault. We cannot read vault contents, under any order.
- That a hosted Outpost holds nothing but encrypted data. It also holds vault headers, and headers are not secret.
- That browser cookies or site data are zero-knowledge. They are not in the vault.
- That we "will not" read your data. The truth is stronger: we cannot.
Licenses
The suite is commercial software licensed per the terms shown at install. It is built on open-source components, including SQLCipher and an MLS implementation, whose license texts ship inside every installer and in the Outpost distribution.
Contact
Network Communications, Inc., Pensacola, Florida · info@net-com.com