Privacy policy

Sentinel is operated by Atlantis Web Services (“we”). Questions about this policy or your data: [email protected].

You do not need an account. When you press the ring button:

• Your location is read once by your browser, only after you allow it, and sent to our server so we can check that you are near the door. We use it for that check and then discard it. We do not store your location.
• A photo is taken with your camera, only after you allow it, and shown to the owner so they can see who is at the door. It is deleted automatically after 30 days, or sooner if the owner deletes it.
• An optional name and reason, if you choose to type them, are shown to the owner.
• Technical data such as your IP address and browser type is used to prevent abuse (for example, rate-limiting repeated rings). IP addresses are kept only in short-lived counters and are not attached to your photo.
• On your device, we keep a random visitor ID and a short list of your last few rings, so the page can show them to you. They never leave your device except the visitor ID, which is sent with a ring to apply fair limits. You can clear this list on the home page at any time.

We use no advertising or tracking cookies on the visitor page, and we show no ads there. We do not sell your data.

A record of the ring (time, doorbell, outcome, distance band, your optional note) is kept for up to 90 days so the owner can see their history, then deleted.

• Account data: your email address and a hashed password. If you add them: passkeys (public keys only) and an authenticator-app secret (stored encrypted).
• Doorbell data: each doorbell’s name and the location you set for its geofence.
• Device data: your phone’s push-notification token and model, so we can ring the right phone.
• Crash reports: if the app crashes, a report (the technical error, your phone model and Android version, and an anonymous Firebase install ID) is sent to Google Firebase Crashlytics so we can fix it. It contains no name, email, photo or location. You can switch this off any time in Settings → Send crash reports.
• Security logs: sign-ins and security events (such as password changes) are kept for 180 days to protect your account.
• Ads: the app shows ads served by Google AdMob (see “Advertising in the app” below).
• Microphone and location: the microphone is used only while you are on a live call with a visitor, and your location only on the screen where you place a doorbell. Neither is used in the background.

Live audio and video calls are sent directly between the two phones where possible, or through a relay we operate. We do not record calls.

The Android app is supported by ads from Google AdMob: a banner on the home and history screens, an occasional card inside a long history list, and, rarely, a full-screen ad when you open the app yourself after being away for a while. Visitors never see ads, and no ad is ever shown during a call or on top of a ring you need to answer.

• Google may collect your device’s advertising ID, IP address, and how you interact with ads, to serve and measure ads and to prevent fraud. Where the law requires it (for example in the EEA and UK) you are asked for consent before any ad is requested, and you can change that choice any time in Settings → Ad privacy choices.
• You can also reset or delete your advertising ID in Android’s settings.
• Sentinel is for adults and is not directed at children, so ads are not child-directed. We never give advertisers your photos, your visitors’ details or your doorbell locations.
• More: how Google uses data from apps that use its services.

• The door’s owner, who receives the ring.
• Google, to deliver push notifications (Firebase Cloud Messaging) and, in the owner’s app, ads (AdMob).
• Our hosting and email providers, who process data only on our behalf.

We disclose data if the law requires it.

Traffic is encrypted in transit. Passwords are hashed, secrets are encrypted, and photos are kept outside the public web folder and only served to the owner they belong to.

Owners can delete individual rings and photos, and delete their whole account from the app (see how to delete your account). Visitors can ask us to remove a photo of them by emailing [email protected] with the approximate time and place. Depending on where you live you may also have rights to access, correct or erase your data and to object to processing; write to [email protected] and we will respond.

Sentinel is not directed at children under 13, and owners must be adults.

If we change this policy in a meaningful way we will update the date above and, for owners, tell you in the app.