1. What this covers
We run a push relay so the official Fluxer app can get notifications from instances we don't operate. Apple and Google deliver notifications to an app only through the credentials of whoever signed it, and for the official app only we have them.
This notice adds to our privacy policy and applies only when the push relay is used. It does not apply to UnifiedPush, where your instance sends notifications directly to a server that you have chosen and where Fluxer is never involved.
2. How it works
Your device creates a key pair and keeps the private half to itself. Your instance encrypts each notification to the public half and sends the encrypted notification to the relay, which passes it on to Apple or Google without opening it.
3. What Fluxer can see
We can't read your notifications, because the relay never has the private key. Each encrypted notification is also padded to a fixed size to hide its length.
For each notification the relay handles, we record:
- a salted hash of the device identifier
- which app the device identifier belongs to
- whether it's the app's release or development version
- the size of the encrypted notification
- whether Apple or Google accepted it
- how long the relay took to handle it
- the time
Our edge servers also record the network address of the instance that sends it. We keep this record, and the address that our edge servers log, for as long as the security and usage logs described in section 7.4 of the privacy policy.
4. What others can see
Apple or Google receives the device identifier, the app it belongs to, the notification's priority and expiry time, and the encrypted notification, which it can't read.
Your instance admin has the relay address for your device, and anyone who has that address can send notifications to your device through the relay. The address stays valid until the device identifier changes, which can happen when you reinstall the app, move to a new device, restore the device from a backup, or reinstall its operating system.
5. Where this happens
The relay and its logs run on the same infrastructure as the rest of the official Fluxer service. Section 6 of the privacy policy explains where that infrastructure is located. Your instance runs wherever its operator has chosen to put it.
6. Your choice
The relay is used only if both you and your instance admin turn it on. Either of you can turn it off at any time, and then the relay stops sending you notifications.