Privacy Policy

What Obacht stores

• Account: your email address and a salted password hash (authentication is handled by Supabase Auth)
• Profile: username, display name, and optional first/last name
• Sign-up record: the invite code you used, plus the Terms version and timestamp you accepted
• Plan: your tier and, once billing goes live, a Stripe customer identifier
• Device inventory: name, type (Raspberry Pi / Linux / Mac), and for Macs a hardware identifier (platform UUID) so we recognise the device when you sign in again. We do not ask for serial numbers or MAC addresses.
• Network addresses: the device's local IP address and its public IP address
• Hardware and OS details reported by the agent: vendor and model (where the device reports them), CPU architecture, kernel, OS name and version, hostname, agent version. Plus the device picture, if you pick one yourself.
• Connection state: install tokens, first-connected and last-seen timestamps, online/offline status
• Live health metrics: CPU load, RAM and disk usage, CPU temperature
• Network traffic counters per device (bytes in/out) used for your traffic quota
• The list of systemd services and installed templates per device, with install and reconcile events
• Monitoring rules you define and the alerts they trigger
• Device logs and events your device or templates choose to send to the dashboard
• WireGuard public keys and the tunnel IP assigned to each device
• Your SSH public keys and each device's SSH host-key fingerprint
• Custom domains you bind to a device
• Projects, their members and roles, and which devices belong to them
• Notification preferences and the notifications we have sent you
• Feedback and support messages you submit

What Obacht does not store or cannot access

• The data inside the apps you host: databases, uploads and user content live only on your device; Obacht relays the connection but never stores it
• Files or backups from your device, Obacht never copies your filesystem
• The contents of your terminal sessions or the commands you run: sessions pass through our SSH gateway and are never recorded or stored
• Your source code or application configuration
• Your WireGuard private keys: they are generated on the device and never sent to us
• Your SSH private key in usable form: we store it only encrypted with your passphrase and can't decrypt it. For a terminal or file session your browser hands the unlocked key to our SSH gateway, which keeps it in memory for that session only and never writes it anywhere
• Your password in plain text: Supabase Auth stores only a salted hash
• No advertising IDs, no third-party trackers, no behavioural profiling
• We never sell your data and never share it with advertisers or data brokers

This website and the newsletter

• Our web servers log the IP address, time and requested address of each visit, for security and to find errors
• Website statistics with Umami run on our own server (monitoring.obacht.dev) and only load after you agree in the banner. Umami sets no cookies. Your choice is saved in your browser's local storage
• The newsletter and the pilot sign-up run on our own Listmonk server (list.obacht.dev). We use your email only for the lists you tick yourself. Every mail has an unsubscribe link

Other services that see some data

• To learn its public IP address, the agent asks one of api.ipify.org, icanhazip.com or ifconfig.me. That service sees the device's IP address
• The agent and the Mac app are downloaded from GitHub releases. GitHub sees the IP address of the download
• If you turn on browser notifications, they are delivered through your browser maker's push service (for example Google, Mozilla or Apple)
• Account and alert emails go out through an email delivery service

Infrastructure

Obacht runs on European infrastructure (Hetzner, Germany). Devices connect through outbound-only WireGuard tunnels, so your device is never exposed to inbound ports on the public internet. Terminal access uses SSH public-key authentication. Your private key is stored only encrypted, and its unlocked form never reaches our API or database. All connections are encrypted in transit.

Your data, your control

You can export your account data and delete your account at any time from the dashboard. Deleting cascades to your devices, metrics, logs, keys, domains and projects. We share data only with the providers needed to run the service (hosting and authentication, plus payment processing once billing is live), never with advertisers or data brokers.

Why we're allowed to process it

• Running your account, your devices and the network: to fulfil our contract with you (Art. 6(1)(b) GDPR)
• Website statistics, newsletter, pilot sign-up and browser notifications: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time
• Server logs and handling abuse reports: our legitimate interest in a secure service (Art. 6(1)(f) GDPR)

How long we keep it

Account and device data stay until you delete the device or your account. For device metrics we keep only the latest reading, no history. Newsletter addresses stay until you unsubscribe. When you delete your account, the data tied to it is deleted with it.

Your rights

You can ask what we store about you, have it corrected or deleted, restrict or object to processing, and take your data with you (the data export in your settings does that). Consent you gave can be withdrawn at any time. Responsible for the processing is the operator named in the imprint. You can also complain to a data protection authority, for us that's the Berlin Commissioner for Data Protection and Freedom of Information.