Privacy
hApp Auth keeps what it needs to sign you in and manage your connections. It never shares or sells sign-in history or uses it for behavioural profiling.
What we keep
- Your account: the public half of each passkey, your verified email addresses, and a GitHub account you link.
- Which sites and agents you allowed and when they last used it, so you can see and revoke them.
- Agent keys you choose to link and the attestations issued for them, once those ship.
- An audit log of your account’s events, so you can see what happened to it.
Who sees it
A site sees only what you allow on the consent screen. Every third-party site gets its own identifier for you, so two sites cannot match you by it. Information you choose to share can still identify you. We never share or sell sign-in history or use it for behavioural profiling, and we have no advertising or profiling partners.
Optional Proofs · In development
We're building a way to share a specific statement checked by an app. You will choose the proof, recipient and purpose separately from ordinary sign-in. Declining a proof will leave basic sign-in available. An app may require relevant evidence for a particular action. This feature is not available yet.
Managing access
Your account lists your connected sites and agents so you can revoke their access. Revoking access cannot erase information a recipient already received. For anything else, write to [email protected].