Privacy Policy

Effective date: 23 July 2026

This Privacy Policy explains how the Wavey project team ("Wavey", “we”, “us”, or “our”) collects, uses, discloses, and otherwise processes information when you visit waveyhq.dev (the “Site”) or submit feedback through it.

The Wavey project team operates the Site from India. For privacy questions or requests, contact [email protected] .

1. Scope

This Policy applies only to the public Site. It does not govern:

  • the Wavey Console at console.waveyhq.dev ;
  • data collected by a Wavey software or hardware deployment;
  • third-party websites, repositories, communities, or services linked from the Site; or
  • information processed by a person or organization that deploys Wavey independently.

Those products and services may have separate terms and privacy notices. A person or organization deploying WiFi sensing is independently responsible for its data practices and legal obligations.

2. Information we collect

Information you provide

The Site contains a feedback form. If you submit it, we collect:

  • your feedback message;
  • your name, if you choose to provide it; and
  • the URL of the page from which you submitted the form.

Please do not include passwords, credentials, health information, precise location data, or other sensitive personal information in feedback.

Information collected automatically

When you access the Site, we and our service providers may receive:

  • IP address and approximate location derived from it;
  • browser, device, operating-system, and language information;
  • requested URL, referring URL, date, time, and request status;
  • page views, navigation paths, clicks, scroll depth, outbound-link interactions, and other usage events;
  • performance information and web-vital measurements; and
  • identifiers stored in cookies, local storage, or similar browser technologies.

Our analytics configuration also supports autocaptured interactions, heatmaps, and session replay. Session replay may reconstruct page content and interactions such as clicks, scrolling, DOM changes, and input events. PostHog is configured not to mask all input fields. Do not enter sensitive information into the Site.

Information stored on your device

The Site uses browser local storage to remember your light or dark theme preference. Analytics providers may also use cookies, local storage, session storage, or similar technologies to distinguish browsers and sessions. For example, Google Analytics commonly sets _ga and _ga_<container-id> cookies; Google states that their default expiry is two years, subject to browser restrictions and account configuration.

3. Analytics services

The Site currently loads the following services automatically when a page loads:

This Policy is notice about those technologies; it is not itself consent. Where applicable law requires prior consent for non-essential analytics, cookies, or replay, those technologies should not be activated until valid consent has been obtained.

4. How we use information

We use information to:

  • provide, maintain, secure, and troubleshoot the Site;
  • understand how visitors find and use the Site;
  • improve documentation, navigation, accessibility, and performance;
  • detect abuse, fraud, attacks, outages, and technical failures;
  • review and respond to feedback; and
  • comply with law and protect our rights, users, and the public.

We do not use Site information to make decisions about employment, credit, housing, insurance, education, or access to essential services.

Where a legal basis is required, we process personal information on one or more of these grounds:

  • Legitimate interests: operating, securing, debugging, and improving the Site, provided those interests are not overridden by your rights.
  • Consent: where we ask for consent, including where applicable law requires consent for non-essential storage, analytics, or session replay. You may withdraw consent without affecting earlier lawful processing.
  • Performance of a request: taking steps you ask us to take, such as reviewing feedback or responding to an inquiry.
  • Legal obligation: complying with applicable law, court orders, or lawful government requests.

The legal basis available for a particular activity depends on your location and the circumstances.

6. How we disclose information

We may disclose information:

  • to the analytics, hosting, security, and form-processing providers identified in this Policy;
  • to project maintainers, contractors, or advisers who need it for the purposes described above and are subject to appropriate duties;
  • when required by law, legal process, or a valid governmental request;
  • when reasonably necessary to protect rights, safety, security, or property; or
  • in connection with a reorganization, transfer, or succession of responsibility for the Site, subject to applicable law.

Feedback submissions are processed and stored by Netlify Forms. Netlify recommends that customers actively manage and regularly delete form submissions containing personal information. See Netlify’s Privacy Statement and Forms submission documentation .

We do not sell personal information for money. We do not knowingly use Site information for cross-context behavioral advertising.

7. International transfers

We operate from India, and several service providers process information in the United States or other countries. Those countries may have privacy laws different from the laws where you live. Where required, transfers should be supported by an applicable legal mechanism, such as standard contractual clauses or another provider-offered safeguard.

8. Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including security, dispute resolution, and legal compliance. Retention depends on the information and context:

  • feedback is retained while it remains useful for review, response, project improvement, or legal records;
  • hosting and security logs are retained according to operational needs and provider settings;
  • analytics, performance, and replay data are retained according to the active settings and contractual terms of the relevant provider; and
  • browser cookies and local-storage values remain until they expire, are replaced, or you clear them.

Backups and deletion queues may retain residual copies for a limited period after deletion.

9. Your choices and rights

You can restrict cookies and similar technologies through your browser, clear stored Site data, use content-blocking tools, or use the Google Analytics opt-out browser add-on . Blocking these technologies may affect preferences but should not prevent access to the Site’s public content.

Depending on applicable law, you may have rights to:

  • request access to or a copy of your personal information;
  • request correction, deletion, or restriction;
  • object to particular processing;
  • withdraw consent;
  • request portability of information you provided;
  • appeal certain decisions; and
  • complain to an appropriate data-protection authority.

To exercise a right, email [email protected] and describe your request. We may ask for information reasonably necessary to verify it. Analytics data may be difficult to associate with you unless you provide the relevant browser or service identifier.

The Site does not currently respond to browser “Do Not Track” signals. We will honor legally binding opt-out signals where required and technically applicable.

10. Children’s privacy

The Site is intended for a general technical audience and is not directed to children. We do not knowingly request personal information from children. If you believe a child has submitted personal information, contact us so we can investigate and, where appropriate, delete it. A parent or guardian should supervise a minor’s use of the Site.

11. Security

We use reasonable administrative and technical measures intended to protect information. The Site uses HTTPS and security-related browser headers. No method of transmission, storage, or processing is completely secure, and we cannot guarantee absolute security.

12. Changes to this Policy

We may update this Policy to reflect changes in the Site, our practices, providers, or law. We will post the revised Policy here and update its effective date. If required by law, we will provide additional notice or seek consent.

13. Contact

Wavey project team
India
[email protected]