Privacy
onwrist is open-source, self-hostable software. This page describes what the software stores and who can see it. It applies to whichever instance you're using — "the operator" below is whoever runs that instance.
What's stored
- Your account: your email address and a hash of your password (argon2id — the password itself is never stored). Login sessions and email-verification links are stored as hashes too.
- Your collection and wear log: the watches you enter, their details, and when you wore them.
- Your photos: uploads are re-encoded to WebP on the server, which strips embedded metadata — including any GPS location your camera added.
- Operational records: short-lived rate-limit counters (keyed by IP) that protect the login and signup forms.
Who can see it
- You: every read and write is scoped to your account. Other members have no path to your data — photos are served only through authenticated, ownership-checked requests, never from a public bucket or directory.
- The operator: whoever hosts an instance can technically access its database and photo storage — that's inherent to hosting, not specific to this app. If you don't want to extend that trust, self-host your own instance.
- Nobody else. There are no analytics, trackers, or ads. The only third-party services involved are the signup captcha (Cloudflare Turnstile) and, if the operator configured one, the email provider that delivers verification and password-reset messages to your address.
Cookies and email
- One cookie: your login session. Nothing else is set, and nothing follows you around.
- Email is transactional only — verification, password reset, email-change confirmations. No marketing, no digests.
Deleting your data
Delete your account yourself from the settings page — deletion is immediate and permanent, and removes every record and photo file. You can also ask the operator of your instance to delete it for you.