signo

Privacy

This copy of signo runs at usesigno.co.uk and is run by Egglabs. It signs you in to the sites you choose and uses your details for nothing else.

What it stores

• Your email address, and your name if you give one
• The public half of each passkey. Your fingerprint, face or screen lock never leaves your device.
• When you created your account and passkeys, and when each passkey was last used
• Your sessions, the sites you allowed, and the codes and tokens issued to them
• If you add a site: its name, callback URLs, client ID and secret

It keeps no IP addresses, except in rate-limit counters held in memory for at most 15 minutes. It writes no request logs, sets only the cookies that signing in needs, and loads no third-party scripts.

Who receives your details

• Sites you allow: your email, your name if they ask for it, and an ID for your account
• The email service that delivers sign-in links: your email address
• The company hosting the server, which stores the database

How long it is kept

Sign-in links last 15 minutes, sessions 14 days, and the permission you give a site up to a year. Your account, name and passkeys stay until you delete your account.

Your choices

On your account page you can change your name, remove passkeys and delete your account. Deleting it deletes everything signo holds about you, including sites you added. Sites you signed in to keep what they saved when you did.

You can ask for a copy of what signo holds about you, and you can complain to your data protection authority.

Privacy