Privacy
What FarnorID keeps about you, why, for how long, and how to delete it.
The short version
- We keep only what we need to sign you in, show your login history, and let you revoke apps.
- No ads, no trackers, no selling your data.
- Other companies' apps only get the fields you approve on the consent screen, and each gets its own private ID for you.
- Farnor Labs' own apps (such as Parcetta, Gaitro and Tellsie) work with your FarnorID without an approval screen, and share one Farnor ID for you, so they know you're the same person.
- Your login history is kept for as long as your account exists. IP address, browser details and approximate location are kept 30 days, then erased.
- You can export your data or delete your account yourself, from Account.
What we keep, why, and for how long#
| Data | Why | How long |
|---|---|---|
| Name, verified email, optional photo | Run your account and share it with apps you approve | Until you delete your account |
| Passkey public keys and their names | Sign you in | Until you remove them or delete your account |
| Recovery codes (stored only as hashes) | Get back in if you lose a passkey | Until used or regenerated |
| FarnorID sessions | Keep you signed in | 12 hours idle, 7 days at most |
| App connections and what you approved | Show and revoke your apps, record your consent | Until you delete your account (revoked apps stay listed) |
| Login history: time, app, result, method | Give you a complete record of your sign-ins | Until you delete your account. No automatic cut-off |
| IP address, browser details, approximate location | Security and troubleshooting. Shown as approximate, never as proof of identity | 30 days, then erased. History shows "expired" |
| App-owner diagnostics | Let an app's owner fix setup for their own app | 30 days. Owners see a per-app pseudonymous ID, never your email or IP |
Who can see it#
- You: all of the above.
- Other companies' apps you connect: only the fields on the approval screen. Optional fields, such as your photo, are off until you turn them on. Each app has its own stable ID for you, so they cannot match you across each other.
- Farnor Labs' own apps: your name, email and photo when the app asks for them, with no approval screen, and the same Farnor ID in each one. They still appear under Apps, where you can disconnect any of them.
- FarnorID operators: restricted, logged access to investigate failures and abuse. No impersonation.
- No one else. There is no third-party analytics or tracking on sign-in pages.
Cookies#
Only strictly necessary ones: your session, a CSRF protection token, and the sign-in step cookie. That is why there is no cookie banner.
Your rights#
Under GDPR and CCPA you can access and export your data (Account, then Export, as CSV or JSON), correct it (Account, name and email), delete it (Account, Delete account), and object to its use. Contact: the address at the bottom of this page (placeholder until launch).
When you delete your account#
- Your app connections are revoked first.
- Your email, passkeys, recovery codes, photo and login history are erased immediately.
- A minimal placeholder row is hard-deleted within 7 days, so pending app sign-out requests can finish.
- Backups are overwritten on their normal cycle. A restore re-applies deletions, so deleted accounts do not come back.
Limits we state honestly#
- Revoking an app stops FarnorID access at once and asks the app to end its session. A generic app may keep its own session until it expires.
- Login history covers only sign-ins FarnorID sees, not what happens inside an app.
- Location is estimated from your IP address and is approximate.
Legal bases (GDPR Art. 6)#
Contract (account, sign-in, sessions); consent (sharing fields with an app, which you can withdraw by revoking); legitimate interests (security diagnostics, abuse prevention); legal obligation where it applies.
Data region: local dev, EU-ready; the production region will be declared before launch. The contact address is a placeholder until launch.
Questions about this policy?
privacy@farnor.example (placeholder until launch)