DATA HANDLING NOTICE
Know what reaches the service.
This notice describes the implemented data flow. It is not a claim of a completed legal or regulatory review.
Information processed
SynthSecret processes public keys, opaque device identities, passkey public credentials, encrypted envelopes, participant IDs, exchange status, purpose categories, context identifiers and timing metadata. It receives network connection information to deliver requests and apply abuse limits. Private keys and exchange plaintext stay on the endpoint.
Purpose and retention
Data is used to authenticate requests, authorize delivery, enforce quotas, investigate service abuse and operate the product. Ciphertext is unavailable after expiry and is removed on acknowledgment or revocation. Retention cleanup removes expired records. Minimal exchange metadata is retained for seven days; inactive identity and passkey records for 30 days. Platform backups may retain historical encrypted records according to backup policy.
Models and analytics
Exchange payloads are not sent to language models, search, embeddings or analytics. No third-party analytics script runs on exchange pages. Clipboard and local runtime handling are under the recipient’s control.
Contact
Request privacy assistance through the NodeRunner contact route. Do not include plaintext secrets in support messages.