ZK Vault

About

ZK Vault: Prove Anything, Reveal Nothing

Your Privacy, Cryptographically Guaranteed

ZK Vault is a privacy-first browser extension that lets you prove claims about yourself without exposing personal information. Using cutting-edge zero-knowledge cryptography, verify your country, email domain, and other attributes while keeping your data completely private.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🔐 HOW IT WORKS

ZK Vault uses zero-knowledge proofs to verify claims without revealing underlying data:

1. Generate Proofs - Create cryptographic proofs of your attributes (country, email domain) locally in your browser
2. Store Securely - All proofs are stored in your browser only - nothing is sent to servers
3. Share Selectively - Websites can request proofs with your permission - you control what to share and when

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

✨ KEY FEATURES

🌍 Country Verification
Prove your country without revealing your exact location or IP address
• Uses IP-based geolocation to determine country, then generates a cryptographic proof
• Only country code is revealed - your coordinates and IP stay completely private
• Real zero-knowledge cryptography, not just hidden data

📧 Email Domain Verification
Prove your email domain (e.g., @gmail.com, @university.edu) without exposing your full email address
• Uses DKIM signatures for cryptographic verification
• Your email is never uploaded or stored - processed locally and immediately deleted
• Perfect for student discounts, company verification, or gated communities

🔒 Real Cryptography
Built on battle-tested zero-knowledge technology
• Groth16 ZK-SNARKs on BN254 elliptic curve
• Same cryptographic primitives used by major blockchain projects
• Not mock proofs - actual verifiable cryptography that can't be forged

🛡️ 100% Private
Your data never leaves your device. Period.
• All proof generation happens locally in your browser using WebAssembly
• No accounts, no registration, no tracking, no telemetry
• We don't operate servers - there's nothing to collect your data
• Open source - verify our privacy claims yourself

👤 Permission System
You're in complete control
• Websites must request permission before accessing your proofs
• See exactly what data will be shared before approving
• Revoke permissions anytime from extension settings
• Per-website isolation - proofs shared with one site don't leak to others

🧑‍💻 Website Integration
Built for developers
• Simple JavaScript API for requesting proofs
• Auto-registration flow for seamless user onboarding
• Works with any backend or framework
• Comprehensive documentation and examples

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🛡️ PRIVACY GUARANTEES

What ZK Vault DOES:
✅ Generate cryptographic proofs locally in your browser
✅ Store proofs in local browser storage only
✅ Let you share proofs with websites you explicitly trust
✅ Give you full control over your identity data
✅ Use real zero-knowledge cryptography (Groth16 ZK-SNARKs)

What ZK Vault DOES NOT:
❌ Upload your data to any servers
❌ Track your browsing history or behavior
❌ Share data with third parties
❌ Require accounts, registration, or login
❌ Collect analytics, telemetry, or usage data

What Each Proof Reveals:

Country Proof
• Reveals: Country code only (e.g., "US")
• Hidden: Exact coordinates, IP address, city, state, region
• How: IP geolocation determines country, then ZK proof is generated locally

Email Domain Proof
• Reveals: Email domain only (e.g., "gmail.com")
• Hidden: Full email address, inbox content, email metadata
• How: DKIM signature verification + ZK proof generation (email processed in memory for 30-60s, then immediately deleted)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🎯 USE CASES

Anonymous Forums & Communities
Build trust without sacrificing anonymity
• Verify users are from allowed countries without collecting personal information
• Require proof of email domain (e.g., only @company.com) without storing emails
• Create verified-anonymous spaces for whistleblowers, activists, or sensitive discussions

Gated Access & Verification
Control access without invasive data collection
• Restrict content based on location without IP blocking or VPNs breaking your site
• Verify educational email domains (@.edu) for student discounts
• Age-restricted content without government IDs or facial recognition

Privacy-First Applications
Build apps that respect user privacy from the ground up
• Comply with GDPR/CCPA by not collecting unnecessary personal data
• Give users cryptographic control over their identity
• Reduce data breach risk - you can't leak data you never collected

Decentralized Identity
Move beyond the username/password paradigm
• Cryptographically provable claims without centralized identity providers
• Compatible with Web3 and decentralized applications
• Users own their identity data, not platforms

Corporate & Enterprise
Verify employees or partners without exposing PII
• Confirm employee email domains without collecting full email addresses
• Location verification for distributed teams
• Privacy-preserving access control for internal tools

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🚀 HOW TO USE

For Users:

Generate a Country Proof:
1. Click the ZK Vault extension icon
2. Go to "Proofs" tab
3. Click "Country" to generate a country proof
4. The extension detects your country from IP and generates a cryptographic proof
5. Your proof is stored locally and can be shared with websites

Generate an Email Domain Proof:
1. Click the ZK Vault extension icon
2. Go to "Proofs" tab
3. Click "Email Domain"
4. Download a .eml file from Gmail (Show original → Download original)
5. Upload the .eml file to the extension
6. Wait 30-60 seconds for proof generation
7. Your email domain proof is ready (your email address is never stored)

For Developers:

Integrate ZK Vault into your website with just a few lines of code:

// Check if user has ZK Vault installed
if (window.zkVault?.isInstalled()) {
  // Request a country proof
  const result = await window.zkVault.requestProof({
    type: 'country',
    autoRegister: true,
    backendUrl: 'https://yoursite.com/api/register'
  });
  
  // User is now verified!
  console.log('Country:', result.proof.publicInputs.countryCode);
}

Full API documentation: https://github.com/Cosmos-Harry/zk-vault

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🔧 TECH STACK

• Zero-Knowledge Proofs: arkworks (Groth16, BN254)
• WASM: wasm-bindgen
• Geolocation: ip-api.com
• Email Verification: DKIM signature parsing
• Frontend: Vanilla JavaScript, Tailwind CSS
• Extension: Chrome Extension Manifest V3

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🔗 LINKS

• GitHub: https://github.com/Cosmos-Harry/zk-vault
• Documentation: https://github.com/Cosmos-Harry/zk-vault#readme
• Privacy Policy: https://github.com/Cosmos-Harry/zk-vault/blob/main/docs/PRIVACY_POLICY.md
• Security Audit: https://github.com/Cosmos-Harry/zk-vault/blob/main/docs/SECURITY_AUDIT.md
• Issues & Support: https://github.com/Cosmos-Harry/zk-vault/issues

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

📝 OPEN SOURCE

ZK Vault is open source under the MIT License. Review the code, verify our privacy claims, and contribute on GitHub.

Built with privacy in mind. Your data belongs to you, always.