Apron Guide

How your data is handled

Your account

To sign in we keep your name, your email address and your password, hashed so nobody can read it. While you are signed in we keep the sign-in with the device's network address and browser type, so you can see and sign out your devices under Account. The email code works for ten minutes, a sign-in for 16 hours and a trusted device for 30 days. Your account stays until an administrator removes it; then everything about it is deleted.

The security log

Sign-ins and failed attempts are written to the app's log with your account id, never with passwords or codes, to detect break-ins.

Who gets the data

The app runs at Vercel and the database at Neon, and the emails are sent by Resend. They process the data on our behalf. A new password is checked against lists of leaked passwords at Have I Been Pwned without the password leaving the app.

Your rights

You can ask the administrator to see, correct or delete your data. You have the right to complain to the Swedish Authority for Privacy Protection (IMY).

Controller and contact details: [to be filled in by the organisation].