Privacy policy

What stays with you

Camera addresses, logins, passwords, snapshots and exported video live on your device, encrypted with a key from the system keychain. Watchpost does not send them to us.

Live video goes from the camera to the app. With remote access it passes through the hub of your group. The hub relays it and stores none of it.

Visits to our sites

We count visits to watchpost.app, the documentation and the account with our own counter. It sets no cookies and stores nothing in your browser.

For a page view the server receives the page path, the site you came from, campaign marks (utm_), your language, and the browser and system named in the User-Agent. A visitor is a code computed from your address and browser with a salt that changes every day, so one person on two days looks like two visitors. The address and the User-Agent are not saved. Country and city come from an offline database on our server, so no outside service sees your address.

We skip robots and anyone whose browser sends Do Not Track or Global Privacy Control. Single page views are kept for 90 days. Daily totals stay.

Your account

To sign in we need your email. We send a link or a code to it, and that is the whole login: there is no password to leak. We keep the address, your language, when you signed up and last signed in, and your open sessions in the cabinet.

We keep a log of whether each email arrived. It holds no address and goes after 30 days. Product news reaches you only if you agreed to it when you signed in. To withdraw, write to us.

Licenses and installations

Each installation that signs in or uses a license gets its own key pair. We keep the public key, a fingerprint of the installation, the license it uses, and when it first and last contacted us.

Such a request also names the build it comes from: platform, version, stage, build number and system version. We use it to see which builds are in use and to ask for an update when a feature needs a newer one. Nothing about your cameras goes with it.

The Mac build from our site also asks watchpost.app/releases.json once a day whether a newer version exists. You can turn that off in Settings, General.

Invitations and Inbox

When you invite a person to a site or send a package, the server keeps it for them for 30 days. A package is encrypted for the recipient's installations, and we cannot read it. An invitation is not encrypted, because the person has no key yet. It holds your name and email, the names of the site and hub, and the expiry date.

Payments

Purchases are not open yet. When they open, this page will name who handles the payment and what we keep from the receipt.

Who else sees data

We do not sell data and we show no ads. Resend delivers our email. Cloudflare runs our domain names and checks the sign-in form for bots. Our servers sit with a hosting provider. Nobody else gets your data.

Your choices

To delete your account, or to see or correct what we hold about you, write to us from the address on the account. Deleting erases your email. A license tied to the account cannot be restored afterwards, and rented activations run to the end of their term.

To stay out of the visit counter, turn on Do Not Track or Global Privacy Control in your browser.

Contact and changes

Questions about this page go to the address below. When we change what we collect, we change this page and its date.