Privacy
Public site
The public site uses no cookies, analytics, or third-party resources. After sign-in, the account area sets one session cookie to keep you signed in.
Each session stores the IP address and browser user agent it was started from, so you can review your active sessions. The session record is deleted when you sign out or after the session expires.
Audit log
The audit log records account and API activity. Each entry stores the account, the action, a timestamp, the IP address the request came from, and a detail record:
- for API calls: the method, path, response status, request id, and API key id;
- for invitations, and for accounts created or disabled by an administrator: the email address;
- for API keys created: the key's name and the visible prefix of the key, never the key itself;
- for other actions: at most a key id, a count, or whether an email address was entered.
Audit records are kept for the life of the service. Accounts can be disabled on request; audit records are not erased.
For privacy requests, contact hello@evomry.com.