Privacy policy

Self-hosted software

Oclin Home AS publishes relaii as free, self-hosted software. We do not operate relaii installations, access their content, or decide how information in them is used. The operator of each installation is responsible for its own data handling.

Company

Oclin Home AS

Organisation no.

916 749 724

Privacy contact

privacy@oclin.no

This policy covers relaii.app and the related download endpoints at install.relaii.app and releases.relaii.app.

Your self-hosted server is separate

An organisation that runs relaii controls its own server, database, storage, user accounts, messages, and files. Oclin does not receive that content simply because the organisation uses relaii. The operator of that server decides why and how personal information is handled and should provide its own privacy information to its users.

If two operators choose to federate, their servers exchange the information needed for the channels they deliberately share. That exchange is between those operators; it does not pass through the relaii website. Questions about information held in a particular installation should be directed to that installation's operator.

Information handled by the website

Delivering pages and downloads

Like any web server, our infrastructure receives an IP address, the requested address, time, browser request headers, and basic protocol information long enough to return a page or file. Limited technical records may be kept when needed to secure the service, prevent abuse, and diagnose errors. We do not use those records to build a visitor profile.

Update checks from relaii servers

Unless its administrator turns it off, a relaii server fetches releases.relaii.app/stable/latest.json about once a day to learn the latest version. The request carries the server's IP address and a User-Agent naming its relaii version, and nothing else: no server name, domain, account, or content.

We use it to count how many installations are active and which versions they run. The address is not stored in the count or written to an access log; like any request to this site, it can appear in the short-lived technical error records described above under “Delivering pages and downloads”. For counting, it is used only to compute a keyed hash (HMAC-SHA-256) under a random key that exists for one calendar month, so that the same server is counted once per day and once per month. Within an hour after the month ends, the hashes and the key are deleted, and only the number of installations per day, per month, and per version is kept. After that, the counts cannot be connected to an address or to a particular installation.

Administrators can turn the automatic check off under Administration → Server → Updates. A manual check from the Status page sends the same request.

Aggregated analytics

We use an Oclin-operated Plausible Analytics endpoint at plausible.oclin.dev to understand which pages are useful. It measures page paths, referral sources, permitted campaign parameters, and broad browser, operating-system, device, and country categories. It does not set analytics cookies, store raw IP addresses, create persistent identifiers, or follow a visitor across websites or days. Read more about the Plausible measurement method.

Your theme preference

If you choose light, dark, or system appearance, the site saves that choice in your browser's local storage as relaii.theme. It stays on your device, is used only to restore the appearance you selected, and can be removed through your browser's site-data controls.

When you contact us

If you email us, we receive the address, name, message, and any other information you choose to include. We use it to respond, follow up on the matter, and, where necessary, keep a record of decisions or protect legal rights. Please do not send secrets, live access tokens, private keys, or personal chat content in a support request.

Purposes and legal bases

Where the information above is personal data, we rely on our legitimate interests in delivering and securing the website, publishing dependable downloads, understanding aggregate use, counting active relaii installations, and answering enquiries. If an enquiry is about entering into or performing an agreement, we may process it because it is necessary for that agreement. We may also retain or disclose information when Norwegian or European law requires it.

We do not use website information for automated decisions that have legal or similarly significant effects, advertising profiles, or the sale of personal data.

Service providers and disclosure

Hosting, network, analytics, and email providers may process limited information for us where that is necessary to operate the website or answer an enquiry. They may use it only under their applicable agreements and legal obligations. We may also disclose information when required by law or when reasonably necessary to establish, exercise, or defend legal claims. We do not share visitor information with advertising companies.

If a provider processes personal data outside the European Economic Area, we require a lawful transfer mechanism, such as an adequacy decision or the European Commission's standard contractual clauses, where the law requires one.

How long information is kept

We keep technical security and error records only for as long as they are useful for operation, security, and troubleshooting. Plausible statistics are aggregated and cannot be retrieved as a history about a named visitor. Update-check hashes and their key are deleted within an hour after the calendar month ends; the per-day, per-month, and per-version installation counts are kept. Correspondence is kept until the enquiry and reasonable follow-up are complete, and longer only when needed to comply with law or establish, exercise, or defend a legal claim. Your theme choice remains in your browser until you change it or clear the site's storage.

Your rights

Depending on the circumstances, you may have the right to ask for access, correction, deletion, restriction, or portability of your personal data, and to object to processing based on legitimate interests. Because our website analytics and installation counts do not contain a named or persistent record, we may be unable to connect an entry in them to you.

To exercise a right or ask a privacy question, email privacy@oclin.no. You may also complain to the Norwegian Data Protection Authority.

Changes to this policy

We will update this page when the website's data handling changes. The effective date above shows when this version began to apply.