Privacy
We process your account email, authenticator enrollment metadata, session identifiers, credential names and metadata, and credential ciphertext. Credential values are encrypted at rest and are not written to logs, MCP results, error reports, or operator JSON. Audit rows hold actions and names only.
Processors
- Fly.io: application hosting
- Neon: hosted Postgres
- Cloudflare: DNS, WAF, and cache for static assets; R2 for encrypted backups
- Amazon Web Services: KMS, which unwraps the platform key and does not handle a credential
- Resend: email one-time codes and approval notices
- Sentry: error reports without secret values
We do not send operator identity to a third-party authentication vendor and we do not run analytics scripts on this site.