Privacy Policy
Last updated 5 October 2026
Awth (“we”, “us”) provides a central identity service at awth.dev. This Privacy Policy explains what information we collect, how we use it, and your choices.
1. Who we are
The service is operated for Awth at https://awth.dev. Contact: legal@awth.dev.
2. Information we collect
- Account details — email address; optional profile fields (first name, last name, display name); avatar image if you upload one.
- Authentication data — one-time codes (stored hashed), passkey/public-key credentials and related metadata, session and refresh tokens.
- Security and abuse-prevention data — IP address, coarse request metadata, rate-limit counters, and Cloudflare Turnstile verification results.
- Service logs — operational logs needed to run, debug, and secure the service (for example email delivery status from our providers).
3. How we use information
- Create and secure your Awth account
- Send verification and recovery codes
- Enable passkey sign-in and session management
- Show your profile and avatar to apps you sign into with Awth
- Prevent abuse, fraud, and spam
- Operate, maintain, and improve the service
We do not sell your personal information.
4. Sharing
We use infrastructure and service providers that process data on our behalf, including:
- Cloudflare — hosting, storage, and security (including Turnstile)
- Resend — transactional email delivery for verification codes
We may also disclose information if required by law, or to protect the service, users, or others from serious harm.
When you use Awth to sign into another app, that app receives identity information you authorize (for example user id, email, and profile fields). That app’s own privacy policy then applies to how it handles that data.
5. Retention
We keep account and authentication data while your account is active. One-time codes expire quickly. Security logs and rate-limit data are kept only as long as needed for abuse prevention and operations. You can delete your account from your signed-in profile in Awth, or by emailing legal@awth.dev.
6. International processing
Our providers may process data in Australia and other countries. By using Awth, you understand that your information may be processed outside your home country, with safeguards appropriate to the service.
7. Your choices
- Update profile details in Awth
- Delete your account from your signed-in profile, or request access, correction, or deletion via legal@awth.dev
- Stop using the service at any time
8. Children
Awth is not directed to children under 16. If you believe a child has created an account, contact us and we will take appropriate steps.
9. Changes
We may update this policy from time to time. The “Last updated” date above will change when we do. Continued use of Awth after an update means you accept the revised policy.
Questions: legal@awth.dev