Privacy Policy

Last updated: 2026-04-23

What we store

When you obtain a supporter license, we verify your active GitHub sponsorship using your GitHub OAuth token (which you grant directly to GitHub, not to us). We read only:

• Your GitHub login (username)
• Whether you sponsor the project at the required tier

When you link your Alexa account to one of our skills, Amazon sends us an access token. We store it, plus your Alexa user identifier, to deliver state updates from your Homebridge plugin to Alexa. We do not send any other data to third parties.

What we do NOT store

• Your email address (we never see it)
• Any device state, sensor readings, or usage patterns beyond what's required to route a directive and return a response
• Payment information (GitHub and Amazon handle payments directly)

Retention

Alexa directive rows are auto-deleted after one hour. Supporter JWT tokens are not stored by us; they're issued to you and live only in your Homebridge config. Refresh tokens are retained until revoked.

Contact

Open an issue at github.com/johnccarroll with "privacy" in the title.

← Home