Privacy

Short version: this site collects nothing, and the app talks to your Home Assistant and to nobody else.

This website

• No analytics, no tracking, no advertising. There is no Google Analytics, no Plausible, no pixel, no fingerprinting.
• No cookies. The only thing stored in your browser is your light/dark preference, kept in localStorage under the key hac-theme. It never leaves your device and you can clear it at any time.
• No third-party requests. Fonts, images, video and scripts are all served from this site itself. Opening the page contacts no other domain, which is also why there is no cookie banner: there is nothing to consent to.
• Hosting. The site is served by Cloudflare Pages (Cloudflare, Inc.). Like any web server, Cloudflare processes your IP address and request metadata to deliver the page; that processing is described in the Cloudflare Privacy Policy. I run no analytics on top of it.
• Links. Buttons that point to GitHub open pages on github.com, which is subject to GitHub's own policies.

The app

• It connects only where you tell it to. HA Companion talks to the Home Assistant URL you enter. There is no account, no relay, no vendor backend and no telemetry of any kind.
• Everything stays on your PC. Settings, tiles, shortcuts, automations, notification rules and logs live in %LOCALAPPDATA%\HaCompanion. Your long-lived access token is encrypted there with the Windows Data Protection API and bound to your Windows account.
• PC sensors are opt-in. If — and only if — you switch on Report PC state, the app registers itself in your Home Assistant as a mobile_app device and sends the up to eleven sensor values to your instance. You can turn it off again, and delete the device in Home Assistant.
• Diagnostics are redacted. The diagnostics report and the configuration backup deliberately exclude the token and webhook. Log files stay local until you choose to attach one to a bug report.
• WebView2. Lovelace dashboards are rendered by Microsoft's WebView2 runtime inside a private profile folder that belongs to this app. That profile holds your Home Assistant session, exactly like a browser tab would, and the factory reset deletes it.

Your rights

Since neither this site nor the app collects personal data about you, there is nothing for me to disclose, correct or delete. For anything concerning the hosting provider's logs, please refer to Cloudflare's privacy policy linked above. Questions are welcome via the contact page.