1Password

1Password says saved vault data is end-to-end encrypted and inaccessible to 1Password itself.

The product's main privacy protection is architecture, not a settings toggle that can later be changed.

Support materials clearly distinguish encrypted secrets from ordinary service metadata.

Account, billing, and support metadata still exist outside the encrypted vault boundary.

1Password says it does not sell private information or give vault data away.

Encrypted vault contents remain outside ordinary vendor-readable sharing paths by design.

Business, individual, and admin roles are described separately in the privacy materials.

Account metadata, billing details, support contacts, and team administration data may still be processed by vendors and admins.

Vault contents are architecturally separated from website cookies and marketing analytics.

The product business model is account and subscription based rather than ad-targeting based.

1Password documents website tracking categories instead of hiding them inside generic legal language.

The website, support, and marketing surfaces still use cookies and other tracking technologies for analytics and advertising purposes.

Users can export 1Password information and retrieve data even from frozen accounts.

Vault contents remain under user-controlled encryption rather than ordinary vendor-retained readable storage.

Rights and account management paths are documented in the privacy notice.

Team relationships, permissions, support data, and some account metadata may persist differently from vault items and exports.

Users retain export access to their stored information.

Teams have granular vault and user permission controls.

The privacy notice documents marketing opt-outs and privacy request channels.

If the user loses core credentials, 1Password cannot decrypt private vault data on their behalf.