Trust and privacy

Who can open what on your computer, what EmptyOS can reach, and what is backed up.

Only you can access Home and the private owner pages. Nothing is public unless you expose it. An eligible static Thing or prepared service shared with a named EmptyOS account opens only for that signed-in account. See Sharing for how to share and revoke access.

On cloud-connected computers, each site and service runs at its own hostname, such as japan-itinerary.yourname.emptyos.com. A script in one Thing does not share another Thing's browser origin or storage, and cannot use the owner management page's session just because you opened it. The shared hostname is still used for visitor sign-in and file pages.

A site's or service's address stays the same when you share it or make it public. Check its sharing controls for the audience. Deleting it permanently reserves the hostname so a different Thing cannot inherit its browser storage; Undo does not erase that reservation. Revocation cannot remove content or app data already saved in a visitor's browser.

Every CLI client and assistant needs your approval to connect, and you can revoke that approval at any time. Client access explains what approval grants and what revocation removes.

EmptyOS and your computer

EmptyOS operates the machine underneath and, like any host, could reach it. Our policy is not to inspect your computer. App content travels directly between your browser and your computer. EmptyOS also signs you in and keeps the list of people you share with.

How sharing is checked

Every time someone you shared with loads a shared Thing, your computer asks EmptyOS whether they still have access. When you unshare someone, they lose access right away, though a page that is already loading may finish. You and public visitors skip this check.

If EmptyOS is down, people you shared with can't open those Things until it's back. You and public visitors aren't affected.

Backups and recovery

Git history covers committed code and configuration, not Database writes or sharing permissions. It is not a complete computer backup. Backups and replacement restores are operator-run and are not automatically scheduled. Keep an independent copy of anything important; email support@emptyos.com to confirm backup coverage or request help with recovery.