Documentation · For providers
Privacy: what the provider sees
What data about users the provider sees in the cabinet, what nobody sees, how long everything is kept, and how a user turns check-ins off.
The provider sees
- the device identifier: the HWID, only if the user turned on “Send HWID” or the subscription requires the HWID; otherwise an alias that stays the same for the pair “device + your cabinet” and is linked to nothing else;
- the system and its version, the FlowLock version;
- when the device first appeared and when it last checked in;
- which limited links it received;
- what happened to messages: received, shown, opened, done, declined.
The provider doesn't see (and nobody does)
The user's IP, country, sites, traffic, logs, their FlowLock account and email, other subscriptions, settings.
FlowLock sees
The same as the provider, plus the hash of the subscription domain. The IP is kept only in the server's memory, to protect against too frequent requests; it is never written to the database. The server never learns subscription domains that are in no cabinet: the apps send only the hash.
The user decides
FlowLock's settings have “Tell the provider I'm connected” (on by default). When it is off, the device doesn't appear in the statistics and receives no messages, and the subscription works as an ordinary one: no contacts, info block or settings from the provider.
Settings changed by the provider are shown with the note “Set by the provider” and a “Restore mine” button. A data import always waits for the person's confirmation.
How long data is kept
- A device that stops checking in is deleted after 180 days.
- Monthly statistics are kept for 24 months.
- Messages and delivery results: 30 days after the message's delivery window ends.
- Deleting the cabinet (or the account) deletes everything at once.
This page in Markdown · Every page is available as Markdown: add .md to its address without the trailing slash. The list is in llms.txt, everything at once in llms-full.txt.