How We Protect Your Data
Your personal details, from your name, email address and phone numbers to your addresses, the messages you send us and your orders, are stored encrypted, with the keys kept apart from the site itself, and every lookup uses a keyed fingerprint, so your details stay sealed even while we search them.
Passwords are kept only as Argon2id hashes, which can never be turned back into the password, and you can add Two-Factor Authentication to your account with an authenticator app, codes by email and backup codes.
Access Guardian shuts out addresses that keep failing to connect, Session Guardian locks an account after repeated wrong passwords and emails its holder a link to unlock it, and Captcha Protection keeps bots away from connecting, creating accounts, resetting passwords and sending forms.
Every page travels over an encrypted connection, every form carries a token only this site can give, so no other site can send a form in your name, and every update to this site's software is signed twice by AWWO®, a post-quantum signature included, before it is installed.
Data We Keep
When you connect a site for automatic updates, we keep its domain (stored encrypted), the version it runs, when it last checked in and which of your seats it uses. We don't keep your Digital Signature on our side beyond your account, and your site keeps its own copy encrypted.
Each time a connected site checks in, we keep the server's IP address for 90 days, encrypted. We use it only to protect our products, for example to notice when one connection is used from several servers. Older entries are deleted automatically.
Like every web server, ours records the IP address, time and address of each request. These logs are kept for 7 days and then deleted automatically.
awwo.space, awwo.world and awwo.download are served through Cloudflare, which protects them from attacks and outages. Cloudflare sees each visitor's IP address and handles it under its own privacy policy.
When you download a product, we record which account downloaded which version and when. Each download link works once and expires after 10 minutes.
To stop abuse, we count repeated attempts from the same address for 15 minutes. We keep only a scrambled fingerprint of the address that can't be turned back into the IP, and it's deleted after those 15 minutes.
You can ask what we keep about your account and your sites, have it corrected, or have it deleted when you close your account. Write to us from the email address on your account.
Services We Use
These are the outside services this site uses right now, what each one does and what it receives, and the list changes by itself whenever one is switched on or off.
Cookies
These are the cookies this site may set and why, and the Cookies button lets you allow or refuse the optional ones whenever you like.