Who we are
Ovenlight is an app for Android phones made by Snowy Ghost LLC ("we," "our," or "us") for opening web apps that you, or friends who invited you, run on your own computers. This policy explains what happens to your information when you use it.
Data we collect
We never see the apps you open or what you do in them, and we build no profile of you. The only things that reach us are emails you choose to send (such as a problem report), what Google shares with us (see Google), and the ordinary web request when a page on ovenlight.app loads, such as an invite page (see Invite links), when you download the connector, or when the connector, on the computer it runs on, checks for a newer version (once a day, again within the hour after a check fails, when it first starts on a newly installed release or on the one an update went back to, and just before it downloads or installs one) and downloads one. An older connector's ovenlight doctor checks too. Like any web request, each carries the computer's IP address. An update's download also shows which system the computer runs (macOS, Linux or Windows), on Linux and Windows its processor type, and the version it installs, since they're in its address. Nothing else about you, the computer's owner or their apps is sent. Cloudflare carries these requests and emails for us (see Who handles it for us).
On your phone
Ovenlight keeps its list of apps, your settings, and each app's own storage (such as cookies and saved data) on your phone, with each app's storage kept separate from the others. Your fingerprint, face or screen lock unlocks Ovenlight. Your phone handles that, and Ovenlight never receives your face, your fingerprint or what you enter to unlock your phone. Nothing Ovenlight keeps is backed up or moved to a new phone, so the keys that connect your phone to other computers can't be restored onto another device.
Camera, microphone, photos and local network
Ovenlight itself uses the camera only to scan invite QR codes, which it reads on your phone. Apps you open can also use the camera or microphone, for example to record a spoken answer. Your phone asks you before Ovenlight can use either one. After that, an app still asks you before it uses the camera, and an app someone shared with you also asks before it uses the microphone. Apps on your own computers can use the microphone without asking again. What an app records goes where the app sends it, usually to the computer that runs it. While Ovenlight is locked, no app can use the camera or microphone, and locking cuts off any camera or microphone an app is already using.
Ovenlight has no access to your photos or files: you choose each one to give an app, and where to save each file, in Android's own pickers, and any photo or video you take for an app comes from your phone's camera app. That file carries what the camera app records in it, such as where it was taken, and the camera app may keep its own copy. Local network access lets Ovenlight find a faster, direct path to a computer on the same network as you.
The computers you connect to
When you open an app, your phone connects to the computer that runs it over an encrypted connection: directly when possible, otherwise through Tailscale's relays, which pass the traffic along but can't read it. That computer belongs to you or to the person who invited you, and it can see what you do in their app, as with any website. You can add only apps that run on your own computers, and a link in an app to any other website opens in your browser, outside this private connection. An app's pages can also load content from other websites, as any web page can, and those sites see your IP address. Feedback you send from inside an app goes to its owner's computer, where the owner and tools they run there can read it. It includes the page's address, any note you add, and a screenshot unless you leave it out.
What the person who invited you sees
An invite carries the name its sender gave you. Your phone joins their network under a random device name, so they can't tell which of your devices it is. They see that you joined, which of their apps you can open, the day you last opened each one, and anything you send them as feedback. Their computer's log also records each page and request your phone makes to their apps, with your name, the time and the address up to any question mark. The page where they manage their network also shows basic details, such as your IP address, what kind of phone you use, and when Ovenlight was last connected. They can stop sharing at any time. When they do, the next time Ovenlight connects, it removes their apps and everything those apps stored on your phone.
The plugin for Claude Code
An app's owner can build, publish and check their apps with Ovenlight's plugin for Claude Code. The plugin runs the connector on the owner's own computer and sends us nothing. What the connector gives the owner's coding agent can include their apps' status and output, and the feedback you send them, screenshot included. That goes to the AI company behind the agent (Anthropic, for Claude Code), which handles it under its own terms. The same goes for any other coding agent the owner uses with the connector.
Tailscale
Ovenlight uses Tailscale's networking software to make private, encrypted connections. If you sign in to your own computers, you sign in with your Tailscale account, on Tailscale's own sign-in page. Signing out deletes that connection from your phone. If you join from an invite, your phone joins the inviting person's private network. Tailscale's service helps devices find each other and sees basic device information, such as a device name, IP address and how well its connection works (such as its delay to Tailscale's relays), but not the content of your apps. Tailscale's terms let it use this information only to run, develop and protect its service, and protect it as this policy does. If an invite uses a server the inviting person chose instead of Tailscale's, Ovenlight tells you before you join, and that server plays Tailscale's part.
Tailscale's software normally sends diagnostic logs to Tailscale. Ovenlight turns that off, so the app sends no logs to Tailscale from your phone. The connector that an app's owner runs on their own computer keeps Tailscale's usual setting and sends its diagnostic logs to Tailscale, as Tailscale's own app does. See Tailscale's privacy policy.
If you install Ovenlight through Google Play, Google shows us statistics such as how many people install and keep it. If your phone shares usage and diagnostics with Google, Google may also pass us reports when Ovenlight crashes, stops responding or runs slowly. If we invite you to test Ovenlight, we see the email address we invited and any feedback you send us through Google Play. We use all of this only to fix and improve Ovenlight. Android runs app pages in its WebView, and Ovenlight turns off WebView's usage statistics and its Safe Browsing checks of page addresses. If you share usage and diagnostics with Google, WebView may still send Google a report when it crashes, which carries no page addresses.
Reporting and leaving
You can report a problem with any app from its menu. That opens an email to us, filled in with the app's name and address, who shared it, how its connection is doing, your Ovenlight version, and your phone's Android and WebView versions and its maker and model. You can edit it first, and nothing is sent until you send it. You can leave apps someone shared with you at any time. Leaving removes their apps and data the same way. The person who shared still sees you listed until they remove you.
Invite links
Opening an invite link without Ovenlight installed loads a page on ovenlight.app, which, like any website, receives your IP address and browser details when it loads. The invite itself stays in your browser and is never sent to us.
Keeping and deleting your information
We keep emails you send us, and what Google shares with us, for as long as we need them to help you or to fix and improve Ovenlight, and we delete them when you ask. We keep no logs of our own of visits to ovenlight.app, connector downloads or update checks. Deleting Ovenlight removes everything it keeps on your phone.
Who handles it for us
Cloudflare runs ovenlight.app and the connector downloads, and forwards email sent to team@snowyghost.com to our Gmail mailbox. Cloudflare handles that information only to provide its services to us, under terms that protect it as this policy does. Google keeps our mailbox, and handles Google Play, under its own privacy policy, and Tailscale handles what this policy describes under its own. We're in the United States, as are Cloudflare and Google. Both are certified under the EU-U.S. Data Privacy Framework, which the European Commission has found adequate. We don't sell your information or share it with anyone else, unless the law requires us to.
Your rights
You can ask for a copy of what we hold about you, or ask us to correct it, delete it or limit how we use it, by emailing team@snowyghost.com. Where a law such as the GDPR applies, our legal basis is our legitimate interest in answering your emails, fixing and improving Ovenlight, and running ovenlight.app and the downloads. You can object to that at any time. You can also complain to your data protection authority. What an app's owner keeps about you on their own computer, such as the record that you joined, when you last opened their apps, and any feedback you sent, is in their hands: ask them to delete it.
Children
Ovenlight is not directed to children under 13. If you think a child under 13 has sent us personal information, email us and we'll delete it.
Changes to this policy
If this policy changes, the updated version will be posted here with the date above revised.
Contact
Questions? Email team@snowyghost.com and a human will reply.