Anonymity

Octopus.sh can be used completely anonymously and is completely free of advertising, tracking or other analytics software. We don’t store any personally identifieable data. We do not track you, your access to, or your requests in anyway (nor can we).

We don’t track your usage activity on any Octopus mobile products and apps, including invite page or links nor on our Octopus.sh website. We set no HTTP cookies or 'SuperCookies', ever, for any reason. We do not use tracking cookies and we do not permit third parties to collect any personal information about you on our products.

We do not share any personal information about our customers with any third parties. We implement no advertising, ad-tracking or analytics, we use no UUID query strings in requests, we use no 3rd party JavaScript frameworks, and all the cryptography is handled in-browser by native W3C Web Crypto APIs.

Data Processing

We can’t acquire any of your data or content on any part of Octopus.sh. You own your own data. We can’t access or share your content.

We don’t have access to your data so we can not find, view, copy, harvest, edit, download, share, sell-on or delete any of your Octopus data.

It is mathematically impossible for us to know who owns which Vault, where that Vault is in the system, or what data a Vault might or might not contain. Information about the Hubs that any Vault is a member of are only stored inside the encrypted Vault itself. Every field of data in your Vault is randomly padded and then encrypted with unique cryptographic keys eg. Your First Name is encrypted with different keys to your Last Name.

We never have access to any private keys or unencrypted data – ever. In short, we don't know who you are, what you store, or what you share, and it is impossible for us intentionally or unintentionally to discover that information.

IP Addresses

We track IP addresses only for the purpose of mitigating DDoS attacks, and an IP address can never tracked back to any specific Vault or Hub. The only access related data stored by the servers are the 'last-modified' timestamp of the encrypted 'Distributed Graph Objects' stored in each Vault.

Data Revoking

You may have the ability to send and then revoke data (such as Artefacts, messages) in Octopus.sh. Please note other users you’ve shared data with could still save this data, either by taking a screenshot or by using some other image-capture technology (whether that be software or a simple camera to take a photo of your device’s screen).

Illegal Activity

Illegal activity is not permitted on Octopus.sh products. We request you do not publically post any unlawful, harmful, obscene, or pornographic content on any of our products.

Contact

If you have any questions about data protection at Octopus.sh, please e-mail info@octopus.sh.