CANOKEY CONSOLE

Privacy Policy

Last updated and effective: October 14, 2026

This policy explains how CanoKey Console processes information when you use its mobile, desktop, and web applications. CanoKey Console is provided by ACentauri Technology Limited. For privacy questions or requests, contact contact@canokeys.org.

CanoKey Console manages your security key locally. The app does not require a CanoKey account and does not automatically upload your credentials or diagnostic logs to us. It does not include advertising or analytics services.

1. Information the app processes

When you connect a CanoKey over USB or NFC, the app reads device information and the data needed for the operations you choose. This may include firmware version and serial number, credential labels and account identifiers, one-time passwords, public keys, certificates, and device settings.

The app also processes information you enter, scan, or import, such as PINs, OATH secrets, QR-code contents, certificates, and private keys you choose to import. This information is used on your device to perform your requested security-key operations. Private keys generated on the CanoKey are managed by the key; the app does not send them to us.

2. Local storage and retention

The app stores preferences such as language, start page, sorting, NFC sound, and privacy-consent choices in local application storage. If you use a PIN-caching option, the associated PIN is stored locally until you clear it or the application data. Local storage is subject to your device's operating-system protections and backup settings.

Credentials and configuration written to your CanoKey remain on the key until you change, delete, or reset them using the relevant key-management functions. Removing the app does not erase your CanoKey.

Files you export remain in the location you choose until you delete them. Clearing app data or browser site data removes local preferences and cached data; on mobile or desktop, you can also remove local application data by uninstalling the app, subject to operating-system backup and restore behavior.

3. Device permissions and files

USB and NFC: used to communicate with the security key you connect or select.
Camera: used when you choose to scan a QR code, such as an OATH credential. Scanning is processed locally; the app does not upload camera images to us.
Files: files you select are read to import keys or certificates, and files are saved or shared when you request an export.

You can control permissions through your operating system or browser. Denying a permission may prevent the corresponding feature from working.

4. Diagnostic logs

CanoKey Console records diagnostic events locally to help you inspect operations and errors. The in-app log viewer keeps the latest 500 events in memory and clears them when the app restarts or the web page reloads. You can pause recording in Settings > View Logs. Diagnostic output may also appear in the platform's debug console.

Logs can contain sensitive information, including account identifiers, QR-code contents, protocol data, and error details. They are not automatically redacted or uploaded. If you copy logs or send them to support, review and remove sensitive information first.

The app does not sell your personal information or automatically share your security-key data with advertisers or analytics providers. If you choose to copy, export, or share information, the destination you select receives that information and handles it under its own policies.

If you contact us by email or submit an issue, we receive the information you choose to include and use it to respond to your request or investigate the reported issue. Do not send PINs, private keys, or credential secrets.

Opening documentation, app-store listings, source-code links, or other external pages connects you to those services. The web application and this website also require requests to their hosting providers, which may process network information such as IP addresses and request metadata to deliver and secure the service. This is separate from the security-key operations performed locally by Console.

6. Security

Security-key operations run on your device and your connected CanoKey. Keep your device, application, and key firmware up to date, protect access to your device, and handle exported files and copied logs carefully. No storage or communication system can be guaranteed completely secure.

7. Your choices and requests

You can revoke permissions, clear cached PINs and local application data, delete exported files, and manage credentials on your CanoKey. You can use the native app's key-management features without creating an online account.

For questions about information you have sent us, or to request access, correction, or deletion of that information, email contact@canokeys.org. We handle requests in accordance with applicable law. We cannot remotely read or delete data stored only on your device or CanoKey.

8. Children's privacy

CanoKey Console is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, contact us so we can address it.

9. Changes to this policy

We may update this policy as the application or our practices change. The current version is published on this page with its effective date. Where required by law, we will provide additional notice or request consent for material changes.