Privacy Policy

• Account information — your name, email, and password (stored only as a secure hash).
• Authentication data — 2FA/passkey settings, active sessions, and login history (IP address, device/browser, timestamps) used for security.
• Usage & telemetry — sign-in events and basic analytics to operate and improve the Service.
• Developer data — if you build with AuthPass: your apps, organizations, API keys, and billing details (processed by our payment provider).

• to provide sign-in and authentication, and to keep accounts secure;
• to detect and prevent fraud, abuse, and suspicious logins;
• to operate billing for paid plans;
• to communicate with you about the Service; and
• to improve and develop features.

AuthPass is an identity provider. When you choose to sign in to a third-party app with AuthPass, we share the identity details you consent to — typically your user ID, name, email, and email-verified status, plus any role the app assigns you. We share this only when you initiate a sign-in to that app. Once shared, the app's own privacy policy governs how it uses your data.

We use a small number of trusted providers to run AuthPass, for example:

• email delivery (transactional emails such as verification and sign-in links);
• payment processing (for paid plans);
• bot protection and analytics.

These providers process data only as needed to provide their services to us.

We use a secure, http-only session cookie to keep you signed in, and short-lived cookies during sign-in flows (for example, CSRF-protection state). We do not use advertising cookies.

We keep your account data for as long as your account is active. Security logs and audit records are retained for a limited period. When you delete your account, we delete or anonymize your personal data, except where we must retain it to comply with legal obligations.

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can manage your profile and delete your account from your dashboard, or contact us to exercise these rights.

We protect your data with encryption in transit, hashed passwords, optional 2FA and passkeys, rate limiting, and brute-force and suspicious-login protection. No system is perfectly secure, but we work to safeguard your information.

Your information may be processed in countries other than your own. We do not knowingly collect data from children under the age of digital consent.

We may update this Policy from time to time and will post the new version here with an updated date. Questions or requests? Contact us at support@authpass.site.