privacy

the short version

the marketing site you're on sets no cookies and runs no analytics or third-party trackers. only the sign-in panels set a single essential session cookie. we don't sell your data.

what we collect

• your account. when you join allowd as a member we store your email and a hashed password, and your discord handle and avatar once you link discord. if you turn on two-factor, we store what we need to verify it.
• your brand and application. the details you send when you apply, like your brand name, what you sell and your current provider, plus the notes our team adds while reviewing it.
• licensing data you store with us. as a brand you create license keys, accounts, devices, sessions and entitlements for your own end users, along with the events they produce. you decide what goes in.
• operational logs. we keep request metadata and service logs to run allowd and keep it secure.

cookies

the marketing site at allowd.dev sets no cookies and loads no analytics or third-party trackers.

the sign-in panels (app.allowd.dev, admin.allowd.dev and portal.allowd.dev) set one essential, http-only session cookie so you stay signed in. it isn't used for tracking and there's nothing to opt out of. without it you can't sign in.

how we use it

• to run the service and keep your account and data secure.
• to review brand applications by hand.
• to reach you about your account or your application.

we don't use your data for advertising, and we don't sell it.

brands and their end users

when a brand uses allowd, that brand is the controller for its end users' data. allowd processes that data on the brand's behalf, under the brand's instructions. if you're an end user of a product built on allowd, contact that brand first and we'll help them where we can.

sharing

we don't sell your data. we share it only with the infrastructure that runs allowd, like hosting, storage and email, and with discord when you choose to link your account. we also share it when the law requires it.

keeping and removing it

we keep data while your account or brand is active, and for a reasonable period after for backups, security and legal reasons. you can ask us to export or delete your data; get in touch and we'll sort it out.

contact

questions about privacy? email hello@allowd.dev.