Privacy Statement
This statement describes what personal data the Faaleoleo Distribution Service portal collects, why, and how long it is kept. We do not use analytics services, advertising networks, or tracking cookies. No IP addresses are stored by this service.
Three categories of users interact with this portal, each with a different data profile:
- Visitors — anyone who browses the site without an account.
- Customers — organisations or individuals with a signed service agreement.
- Beta testers — individuals with a temporary account for pre-release evaluation.
Visitors no account
No cookies are set. Data is recorded only if you submit a form.
| Data | Purpose | Retention |
|---|---|---|
| name · email · subject · message | Contact form — so we can reply to your enquiry. | Until the enquiry is resolved; deleted on request. |
| email address | Release notification sign-up — to inform you when new packages are published. | Until you unsubscribe or ask us to remove it. |
| email · timestamp · outcome | Login rate-limiting — prevents brute-force attempts. The email you type and whether the attempt succeeded are recorded; your IP address is not. | Auto-deleted after 24 hours. |
Customers service contract
Processing is necessary to perform the service agreement. Data is kept for the duration of the contract and any statutory retention period that follows.
| Data | Purpose | Retention |
|---|---|---|
| email address | Primary account identifier. Used for login, download authentication, and notifications. | Account lifetime + any contractual retention obligation. |
| full name · company · role · phone · country | Optional contact details. May be supplied by you or added by the operator. None of these fields are mandatory. | Account lifetime. |
| API token hash · image upload token hash | Authenticates automated downloads (apt, dnf, scripts) and CI image uploads respectively. The tokens themselves are shown once at account creation and never stored — only their hashes are kept (Argon2id for the download token; SHA-256 for the image-upload token). | Account lifetime. |
| notes | Free-text operator notes associated with your account (e.g. contract reference, support history). Managed by the operator; never displayed to you in the portal. | Account lifetime. |
| session token (cookie) | Keeps you signed in. Stored as an HttpOnly, SameSite=Lax browser cookie. The server holds only a reference identifier; the actual token is in your browser. | Until you sign out or the session expires (default: 24 hours; configurable by the operator). |
| package entitlements | Records which packages and images your account is licensed to download, including any per-resource expiry dates. | Account lifetime. |
| TOTP secret · recovery code hashes | Stored only if you enable two-factor authentication. Recovery codes are stored as Argon2id hashes — the plain codes are displayed once at setup. | Until you disable 2FA or close your account. |
| notification preference | Records whether you opted in to email notifications for new package releases. | Account lifetime. |
| download audit log | If enabled by your operator: an append-only, tamper-evident log recording your email, the downloaded resource, and the timestamp. Used for compliance and support. Disabled by default. | Defined in your service agreement or by applicable legal retention rules. |
| email · timestamp · outcome | Login rate-limiting — same as visitors above. | Auto-deleted after 24 hours. |
Beta testers temporary account
Beta accounts are created for pre-release evaluation and expire on a date agreed at registration. The legal basis is consent given when you accepted the beta participation terms. You can withdraw at any time by contacting us to close your account.
Beta testers have the same data profile as customers, with two differences:
| Difference | Detail |
|---|---|
| account expiry | Your account carries an expiry date. When that date is reached, access is revoked and no further downloads are permitted. |
| data deletion after expiry | Your account and all associated records are deleted by the operator within a reasonable period following account expiry. You may request earlier deletion at any time via the contact form. |
Your rights
Depending on your location and applicable data protection law, you may have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Deletion — ask us to delete your data, subject to contractual or legal retention obligations.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent — beta testers and notification sign-ups may withdraw at any time without affecting any prior lawful processing.
To exercise any of these rights, use the contact form.
Changes to this statement
We may update this statement when the service changes. Customers will be notified of material changes through the communication channels defined in their service agreement. Visitors and beta testers will see an updated version the next time they access this page.