# VeloraMesh Privacy Notice

Date: 2026-05-20
Version: v1.0.0-rc1

VeloraMesh is a self-hosted P2P mesh VPN. It is designed to avoid unnecessary
telemetry, but it must process operational metadata to authenticate devices,
build network membership, and negotiate peer-to-peer connectivity.

## Telemetry

VeloraMesh v1 does not include third-party analytics, advertising SDKs, crash
reporting SDKs, or product telemetry callbacks.

## Server-Side Metadata

The self-hosted VeloraMesh server can store or observe:

```text
network names and IDs
device IDs and device display names
network membership state
virtual IPv4 assignments
blocked/removed device state
session expiry timestamps
reported peer endpoints
public IP/port observations
UDP discovery timestamps
control-plane request logs
server operational logs
```

The server does not act as a data-plane relay in v1. Direct peer traffic is
encrypted between peers and is not routed through the control server.

## Client-Side Data

Clients can store:

```text
device identity
network membership
server URL
optional SPKI pin
session token
local tunnel/service settings
local logs
```

Secret storage differs by platform:

```text
Windows: DPAPI protected private-key storage
Android: Android Keystore protected private-key storage
macOS/Linux: restricted local secret files
```

## Peer Visibility

Peers in the same network can learn operational metadata required for direct
connectivity, including virtual IPs and endpoint candidates. This is necessary
for P2P negotiation.

## Logs And Doctor Bundles

Logs and doctor bundles are intended for troubleshooting. Doctor bundles redact
known tokens, private key material, and join secrets, but they can still include
operational metadata such as device IDs, virtual IPs, endpoints, platform
information, and bounded log tails.

Share support bundles only with trusted maintainers.

## Join Secrets

Join secrets are used for onboarding. They should be treated as confidential.
Rotate the network join secret when access should be limited to future
installations only.

## Data Removal

Server data can be removed by purging the VeloraMesh server install and store.
Client data can be removed by purging the client install and configuration on
each device. Purge operations intentionally do not delete Let's Encrypt
certificate source directories.
