DRAFT for the owner to replace. Not legal advice and not in force.

Privacy notice for wildroot.io names

• Your keys stay with you. They are made in your browser. We receive public keys and signatures, never a private key.
• Public by design: your name, its public key and the signed record proving you claimed it are published in DNS, like any domain.
• Logs: every request to wildroot.io, including each name you check, is written to our web server’s access log with your IP address and the time. The page’s requests to our name registry (app.hns.one), name checks included, are passed on with your IP address. Web server logs are kept for 14 days (the current setting), then deleted.
• What we keep: the name, its public keys, when it was claimed, and the mailbox and the two social accounts created for it.
• Passwords for your mailbox and accounts are created by our systems. The system that creates one knows it at that moment; it encrypts it to your key, keeps only the encrypted copy and discards the plain one. After that only your key can open it.
• Where this page sends things: to finish your Bluesky account it sends that account’s password from your browser to the Bluesky server pds.hns.one. If you make a profile page, it uploads the page to our publishing service, which serves it at your address.
• Encrypted passkeys: the Android encryption flow stores an encrypted identity file in this browser (IndexedDB) until you clear the site’s data, and unlocks it locally with your passkey. The encrypted file is never sent to us.
• Device sign-in (including Windows): your encrypted identity file remains in this browser. We store the passkey public key, its name binding, and a separate random unlock key encrypted on our server. After verifying your passkey and the name’s current ownership, we return that unlock key over HTTPS. Neither your identity file nor its private keys are uploaded. This option depends on both this browser’s saved copy and the Wildroot sign-in service. Losing browser storage requires your recovery key file.
• Your profile page is public if you create it, and you can remove it at any time.
• Contact: matt@wildroot.io.