1. What this covers
We run a push relay so the official Fluxer app can get notifications from instances we do not operate. Apple and Google deliver notifications to an app only through the credentials of whoever signed it, and for the official app only we have them.
This notice adds to our privacy policy and applies only when the push relay is used. It does not apply to UnifiedPush, where your instance sends notifications directly to a server that you have chosen and where Fluxer is never involved.
2. How it works
Your device creates a key pair and keeps the private half to itself. Your instance encrypts each notification to the public half and then sends the sealed result to the relay, which passes it on to Apple or Google without opening it.
3. What Fluxer can see
We cannot read your notifications, as the relay never has the private key.
For each notification the relay handles, we record a salted digest of the device identifier, which app and environment it belongs to, the size of the encrypted payload, whether Apple or Google accepted it, how long the relay took to handle it, and the time. Our edge servers also record the sending instance's network address. We keep these records as long as the security and usage logs in section 7.4 of the privacy policy.
Each notification is padded to one size to hide the length of its content.
4. What others can see
Apple or Google receives the device identifier, the app it belongs to, the notification's priority and expiry time, and a fixed-size block it cannot read.
Your instance operator has the relay address for your device. Anyone who has that address can push to your device through the relay. It stays valid until the device identifier changes, which can happen when you reinstall the app, move to a new device, restore the device from a backup, or reinstall its operating system.
5. Where this happens
The relay and its logs run on the same infrastructure as the rest of the official Fluxer service. Section 6 of the privacy policy explains where that infrastructure is located. Your instance runs wherever its operator has chosen to put it.
6. Your choice
The relay is used only if both you and your instance operator turn it on. Either of you can turn it off at any time, and then the relay stops sending you notifications.