Privacy Policy

Last updated July 2026

FedWork Access is the secure sign-in gateway for FedWork applications. This policy explains what information the gateway at access.fedwerks.com collects when you request access, how it is used, and how it is protected. Each FedWork application you sign in to may have its own privacy notice governing your use of that application.

1. Information you provide

When you request a sign-in link, you provide:

• Your email address, which we use to confirm you are authorized and to deliver a sign-in link.
• The application you select, so we can direct you to the right destination.

2. Information collected automatically

To operate and protect the service, we collect limited technical information when you use the gateway:

• Your IP address, browser type/user agent, and request timestamps and metadata.
• Security and audit records of sign-in requests and verifications.

This information is used for authentication, rate limiting, audit logging, and preventing fraud and abuse.

3. Human verification

We use Cloudflare Turnstile to distinguish real users from automated traffic. Turnstile is designed to be privacy-preserving and does not use tracking cookies. Cloudflare processes limited technical signals from your browser to complete the check.

4. Cookies and local storage

This gateway does not use advertising or cross-site tracking cookies. We store your light or dark theme preference in your browser's local storage; it stays on your device, is not used to track you, and is not shared.

5. How we use information

• To verify authorization and deliver sign-in links.
• To operate, secure, monitor, and audit the service.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

6. How we share information

We do not sell your personal information. We share limited information with service providers who process it on our behalf, including our cloud and security provider (Cloudflare, for edge delivery and human verification) and our email delivery provider (to send sign-in links). We may disclose information where required by law or to protect the security and integrity of the service.

7. Data retention

Sign-in links are time-limited. Sign-in records and security and audit logs are retained for a limited period consistent with security, operational, and legal needs, and then deleted or anonymized.

8. Security

Information is encrypted in transit and at rest. Access to the gateway and to FedWork applications is restricted to authorized users, and we apply least-privilege controls to internal access.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, or delete personal information we hold about you, or to object to or restrict certain processing. To make a request or ask a question, contact privacy@fedwork.app. Because this gateway serves authorized users of FedWork applications, some requests may be handled together with the relevant application administrator.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the current version.

11. Contact

Questions about this policy or your information can be directed to privacy@fedwork.app.