w3bsWho we are
w3bs.org is operated by Profullstack, Inc. Questions and deletion requests: hello@w3bs.org. We do not sell your data.
Your account
- Your username, which is public.
- Your email address, to confirm it and to send sign-in links. It is never shown publicly.
- A hash of your password, if you set one, and the public keys and names of your passkeys.
- Sign-in sessions, a record of sign-in attempts (time and whether it worked), and the apps and CLI sign-ins you approved. Tokens are stored only as hashes.
What a Fleet machine sends
Every 30 seconds, the agent on each machine you join sends: its hostname, OS name and version, kernel, CPU architecture and count, uptime, load averages, total and available memory, total and available disk for the root mount, the w3bs version, whether the desktop layer is installed and running, the user name the agent runs as, and its screen-sharing setting (mode, local VNC address, whether it is reachable). Nothing else in the report is stored.
- Only the latest report is kept. Each one replaces the last.
- Actions you queue are kept with their output (the newest 20 per machine, last 16 KB of output).
- Screen sharing passes through our server live and is not recorded. A line with its time and result is kept in the machine's history.
Counting what works
The server records three events: an account was created, the w3bs CLI signed in, and an account's first machine reported in. Each row holds the event name, your account id and the time. No IP address, email or hostname.
Page analytics
Public pages load CrawlProof stats, also run by Profullstack. It records the page address, the referring page, screen and window size, language, time zone and a random visitor id kept in your browser's local storage. It sets no cookie. It is not loaded on your account, Fleet, device sign-in or email link pages.
Email and logs
We send email only for sign-up and sign-in links, through our email provider Resend. Mail to hello@w3bs.org is forwarded to us by Forward Email. Sign-up and sign-in forms use your IP address to limit repeated attempts, and our web server may log IP addresses and requested pages for security and debugging.
How long it stays
- Account data stays until you ask us to delete the account.
- Web sessions end after 30 days; CLI sign-ins after 30 days unused. Expired ones are deleted.
- Email links expire in 20 minutes and are deleted a day later.
- A machine's stats and history are deleted when you remove it.
- Event rows are kept; deleting your account removes your account id from them.
Removing your data
Remove a machine on /fleet or with w3bs fleet rm. Sign the CLI out on your account page or with w3bs logout. To delete your account, email hello@w3bs.org from the address on it. That removes your profile, passkeys, sessions, sign-ins, machines and their history. W3BS Social has its own notes on its page, because posts there are public on the AT Protocol network.