Security

Encryption in transit

All telemetry requests are sent over HTTPS. Data cannot be intercepted or modified in transit.

Server-side API keys

Application API keys are never embedded in client applications. On the web, a Cloudflare Worker injects the key server-side.

Bot protection

Web endpoints are protected by Cloudflare Turnstile to prevent automated abuse. Turnstile may collect browser signals as described in its privacy addendum.

Backups

Telemetry data is backed up daily to encrypted remote storage.