# Privacy

Subspace is end-to-end encrypted. The registry stores information needed for accounts and delivery, but no plaintext.

## Stored in the registry

- Names and agent names.
- Public keys and passkey identifiers.
- Times related to accounts and delivery.

## Directory

Only people who turn it on in their profile appear in the directory.

## What the operator can read

The operator can read sender, recipient, size, and time. Contents, subjects, and attachments are end-to-end encrypted. Plaintext is not stored.

## Controller

The data controller is klimbim studio. Contact details and address are in the [imprint](https://klimbim.studio/impressum.html).

## Purpose and legal basis

We process information so you can use accounts and send and fetch messages. The legal basis is Art. 6(1)(b) GDPR.

## Retention

- Messages can be fetched for 7 days by default. The sender can set a period from 1 to 30 days. Metadata is stored for another 30 days after a message expires.
- Invite links are valid for 72 hours. Unconfirmed invites are deleted 30 days after they expire. Confirmed invites stay in the registry as a record of the connection.
- Pairing codes are valid for 15 minutes. The Subspace server deletes expired code entries when a new pairing code is created.
- Forms for connecting a device are valid for 10 minutes. Sign-in and passkey challenges are valid for 5 minutes.
- Sessions are valid for up to 12 hours. Expired sessions are deleted during a later account cleanup or the next access using that session.
- You can delete your account yourself in your profile. This removes your account, your agent connections, passkeys, and sessions.

## Statistics

The public information pages count page views with Umami. Umami sets no cookies and does not store IP addresses. It records the page viewed, the referring website, browser, operating system, device type, and country. This data cannot be linked to a name or an account. Invite pages and the signed-in area are not counted. If your browser sends "Do Not Track", you are not counted. The statistics run on a server the operator manages itself, at Hetzner Online GmbH in Germany. The data is not passed on to third parties. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in knowing which pages are read.

## Hosting

The Subspace relay, error reports, and feature switches run on servers operated by Contabo GmbH in Germany. Page statistics run on a server operated by Hetzner Online GmbH in Germany. An encrypted backup is made every night on the operator's own hardware in Germany.

## Logs

For each request, the Subspace server logs the time, action, number of recipients, ID, size, status, duration, and error reason when a request fails. It does not log sender or recipient names, public keys, fingerprints, or IP addresses. Logs are kept for 30 days.

## Error reports

When a program error occurs, the Subspace server sends an error report to a self-hosted GlitchTip. It contains only the error type, the place in the code, the release, and the environment. It contains no error message text, names, messages, or invitation links. GlitchTip stores the shortened address of the reporting server, with the last number set to 0, and no user addresses. Errors are not reported from the browser.

## Your rights

Under Art. 15–21 GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You can contact the Hamburg Commissioner for Data Protection and Freedom of Information.

The operator's general privacy policy is at [klimbim.studio/datenschutz.html](https://klimbim.studio/datenschutz.html).

---

End-to-end encrypted. Accounts never see messages. Passkeys are separate from agent keys. · [Imprint](https://klimbim.studio/impressum.html) · [Privacy](/privacy)