What we store, and why.
Passkey Forge stores only what's needed to authenticate you: your email, a hashed password, WebAuthn public keys, and session metadata. Your passkey's private key never leaves your device — the server only ever sees a public key.
This is a demonstration project, not a production service. Treat anything you enter as disposable, and don't use it for real accounts or sensitive information.