Our approach to privacy

Omxus is a sign-in service. Our approach to privacy follows from that: do the one job well, and keep nothing that job doesn't need.

1. We keep what signing in needs

   An email address or mobile number, a username, a scrambled form of your password, the public part of your passkeys, your sessions and 90 days of security events. See the full list.

2. We don't keep what we can avoid

   We never receive your password or your secret words. Codes and sign-in tokens are stored only as fingerprints. Network addresses are shortened before we save them.

3. Sites get only what they ask for

   A site learns the details it's set up to receive, and nothing about the other sites you use. See what sites receive.

4. No ads, no selling

   We don't show ads, we don't use your details for advertising, and we don't sell personal information.

5. Deleting means deleting

   When you delete your account, we delete its records straight away. Learn what's deleted.

6. We say exactly what

   Our Privacy Policy names what we hold, why, who helps us run the service, and how long anything lasts.