privacy policy

When your device posts a reading, we store the device name you chose, the metric names and values in that reading, and the time the server received it. That is the whole record — there is no column for anything else.

We do not inspect or interpret what your metrics mean. If you choose to put personal data into a metric name or value, it is stored and published exactly like any other value, and it becomes readable by anyone.

Readings are also listed on the public explore page while a device is among the 20 most recently active, and streamed live to anyone connected to that device's WebSocket.

The website pages load Plausible Analytics, which counts page views without cookies and without building a profile of you or following you across sites. We see aggregate numbers — which pages are visited, roughly where visitors come from — never individuals.

The API itself (api.postdata.cloud) loads no analytics and no scripts at all, so devices posting readings are not measured this way.

PostData runs entirely on Cloudflare — Workers, D1, Durable Objects and Analytics Engine. As the provider serving every request, Cloudflare necessarily processes connection information such as IP addresses, and keeps its own operational logs under its privacy policy.

PostData's own code does not read, store or log IP addresses, user agents or any other request metadata. Rate limiting is applied per device name, not per visitor.

Cloudflare and Plausible are the only third parties involved. We do not sell or share data with anyone else, and there is no advertising on this site.

There is no authentication on PostData, by design. Device names are first come, first served, and anyone who knows a name can read from it or write to it. There is nothing to log into and therefore no account to compromise.

Both https:// and plain http:// are accepted, because TLS is genuinely painful on small microcontrollers. Traffic you send over http:// can be read or modified in transit by anyone on the network path. Use https:// when your device can manage it — the docs explain how to do that without bricking your firmware.

If you want practical obscurity, use a device name nobody would guess — a UUID works well. That is obscurity, not security: anyone who learns the name has full access.

Since there are no accounts, we hold no profile to show you, correct or export. If a device does contain data about you, you have several options:

• Overwrite it. Post a new reading to the same device name — the latest value replaces what was there.
• Wait. Stop posting and the history ages out within about 92 days, after which the device is deleted automatically.
• Ask us. Email hello@obiio.com with the device name and we will delete it.

If you are in the EU or UK, the GDPR gives you rights of access, rectification, erasure, restriction and objection over personal data concerning you, and the right to complain to a data protection authority — in Portugal, the CNPD. Use the contact address below and we will respond within one month.

PostData is not intended for children, and we ask that it not be used to publish data about them.

PostData is built and operated by obiio, a trading name of PENGUIN WEEK LDA. That company is the data controller for the limited processing described on this page.

Write to hello@obiio.com about anything on this page, including erasure requests.

If this policy changes materially, the date at the top of the page changes with it. There is no mailing list to notify, because we do not have your email address.