# Privacy: what the provider sees

> What data about users the provider sees in the cabinet, what nobody sees, how long everything is kept, and how a user turns check-ins off.

## The provider sees

- the device identifier: the HWID, only if the user turned on “Send HWID” or the subscription requires the HWID;
  otherwise an alias that stays the same for the pair “device + your cabinet” and is linked to nothing else;
- the system and its version, the FlowLock version;
- when the device first appeared and when it last checked in;
- which [limited links](https://flowlock.cc/en/docs/install-links.md) it received;
- what happened to [messages](https://flowlock.cc/en/docs/messages.md): received, shown, opened, done, declined.

## The provider doesn't see (and nobody does)

The user's IP, country, sites, traffic, logs, their FlowLock account and email, other subscriptions, settings.

## FlowLock sees

The same as the provider, plus the hash of the subscription domain. The IP is kept only in the server's memory, to
protect against too frequent requests; it is never written to the database. The server never learns subscription
domains that are in no cabinet: the apps send only the hash.

## The user decides

FlowLock's settings have “Tell the provider I'm connected” (on by default). When it is off, the device doesn't appear
in the statistics and receives no messages, and the subscription works as an ordinary one: no contacts, info block or
settings from the provider.

Settings changed by the provider are shown with the note “Set by the provider” and a “Restore mine” button. A data
import always waits for the person's confirmation.

## How long data is kept

- A device that stops checking in is deleted after 180 days.
- Monthly statistics are kept for 24 months.
- Messages and delivery results: 30 days after the message's delivery window ends.
- Deleting the cabinet (or the account) deletes everything at once.