Privacy policy

Data we process

AuthLink processes website identifiers, website account IDs and labels, device public keys and attestations, short-lived requests, matching codes, approval and consumption results, and security events. Website passwords, device private keys, biometrics and camera images are not uploaded.

When notifications are enabled, AuthLink processes app installation identifiers and notification destinations to send reminders. Firebase/Google and Apple APNs process installation identifiers, delivery information and related device metadata under their own policies. Notifications do not contain transaction details, comparison codes or approval credentials. You can still open the app to view requests with notifications disabled.

Deletion and retention

You can permanently revoke a binding in AuthLink or through the website’s deletion channel. This removes active requests, device verification records, notification destinations, account display information and the original website account ID. Only a minimal account digest and permanent deactivation record are retained to prevent rebinding.

Expired requests are removed in batches after 24 hours, minimal deletion recovery receipts are retained for 24 hours, and ordinary security events for 30 days. Minimal records needed for permanent deactivation are retained long term.

Security limits

This service confirms requests on a bound phone and does not establish a person’s legal identity. Keep your phone safe and check each request. A lost phone, use by others or mistaken approval may affect account security. Binding cannot currently be restored on a replacement phone.