Privacy Policy

Last updated: April 10, 2026

Overview

edgepush is an open source push notification service. This policy explains what data we collect when you use the hosted version, how it is stored, and your rights regarding that data. If you self-host edgepush, this policy does not apply - your data stays in your own Cloudflare account.

What we collect

  • Account information: email address, name, and password hash (if you sign up with email), or basic profile details from your OAuth provider (Google, GitHub).
  • App metadata: names, package identifiers, and creation timestamps for the apps you register.
  • Push credentials: APNs .p8 keys and FCM service account JSONs you upload. Encrypted at rest with AES-GCM using a key we never expose via the API.
  • Push message metadata: device tokens, titles, bodies, timestamps, and delivery status. Retained for 30 days.
  • API key hashes: we store a SHA-256 hash of each API key, never the raw value. Raw keys are shown once at creation and cannot be recovered.

What we do not collect

  • Contents of end-user devices or app data.
  • Advertising identifiers.
  • Behavioral analytics beyond what is necessary to operate the service.

How data is stored

All data is stored on Cloudflare infrastructure (D1, KV, Queues, R2). Credentials are encrypted before they are written to D1. Push message metadata is kept for 30 days, then automatically deleted.

Third parties

edgepush forwards push messages to Apple Push Notification Service (APNs) and Firebase Cloud Messaging (FCM) using the credentials you supply. Apple and Google are independent data controllers for their own services.

Your rights

You can delete your account and all associated data at any time from the dashboard. You can request an export of your data by emailing contact@edgepush.dev. If you are in the EU, UK, or California, you have additional rights under GDPR and CCPA including access, correction, deletion, and portability.

Changes

We may update this policy from time to time. Material changes will be announced in the dashboard and on this page.

Contact

Questions? Email contact@edgepush.dev.