Privacy

Last updated 9 November 2026

Draft for the partner period. It describes what the service does today and has not been reviewed by a lawyer.

What we keep

Your name and email, and a hash of your password, so you can sign in.
Sessions: which signed-in browsers or CLI logins exist for you. We do not record IP addresses or user agents.
An activity log of what people did on an account (publishes, promotions, roll backs, member changes), kept for one year.
The updates you publish: signed manifests and the files they reference, stored for your account only.
The public half of each signing key. Your private signing key never reaches Otaflow.

What devices send

An app asking for updates tells Otaflow which app, platform, runtime and channel it wants. Otaflow records, per app, which runtimes have been seen and when, and counts check-ins. It does not identify a person or a device.

Who else sees it

Cloudflare hosts the service. Push notifications, when enabled, are sent through OneSignal using your account id, without personal details. We do not sell data or use it for advertising.

Your choices

Ask us at hello@otaflow.com to export or delete your account and its data.