Privacy Notice

Last updated: 8 November 2026

OneFirewall Alliance LTD is the controller for account data and a processor for the traffic it handles on your behalf.

What we collect

• Account data: your e-mail address, team membership, sign-in times and session metadata (IP address, browser user agent).
• Configuration: the domains, origins and security rules you set up.
• Traffic metadata: aggregated request counts per site and day; for blocked or unregistered traffic, the source IP, host, path and user agent of recent requests for security analysis.

What we do not do

• We do not store request or response bodies.
• We do not sell data or use it for advertising.
• We do not use advertising or cross-site tracking. The only cookie is a strictly necessary session cookie on the WAP console.

Website analytics

The public landing page (and only that page) uses the polpo-8 analytics service to count visits. It records the page viewed, the referring page, campaign (utm) tags and time on page, linked to a random visitor identifier stored in your browser's local storage. It does not use cookies, does not run on the console or sign-in pages, and is not used for advertising.

Retention

Sign-in links expire after minutes; sessions after days. Aggregated statistics are kept while your site is registered. Unregistered-host statistics are periodically purged.

Your rights

You may request access to, correction or deletion of your personal data by contacting privacy@onefirewall.com.