# Privacy Policy
## Contact
<code>
Harley Watson
privacy@canidae.systems
</code>

## Visiting Online

### Cookies

Only cookies that are essential for DokuWiki's functionality are used. If necessary, these can be blocked in your web browser's preferences.

^ Name               ^  Domain           ^ HttpOnly  ^ Secure  ^ Expiration         ^ Purpose                                     ^
| DOKU_PREFS         | canidae.systems   | no        | no      | 1 year and 1 week  | Remember which extensions you have enabled  |
| DokuWiki           | canidae.systems   | yes       | no      | //Session end//    | Remember which user is logged in            |
| DK//(sessionID)//  | canidae.systems   | yes       | no      | //Session end//    | Remember which user is logged in            |

Participating in Single Sign On will cause Keycloak to set the following essential cookies for identifying your session.

^ Name                     ^  Domain                    ^ HttpOnly  ^ Secure  ^ Expiration         ^ Purpose                                              ^
| AUTH\_SESSION\_ID        | keycloak.canidae.systems   | yes       | yes     | //Session end//    | Remember which user is logged in                     |
| KEYCLOAK\_IDENTITY       | keycloak.canidae.systems   | yes       | yes     | 1 month            | Remember which user is logged in                     |
| KEYCLOAK\_REMEMBER\_ME   | keycloak.canidae.systems   | yes       | no      | 1 year             | //Optionally// Remember username for faster re-login |
| KEYCLOAK\_SESSION        | keycloak.canidae.systems   | no        | yes     | 1 month            | Remember which user is logged in                     |

## Visiting Away-From-Keyboard
{{page>[wiki:plzlogin]&nofooter&noindent}}

### Connectivity
Hyperoptic is our Internet Service Provider. Their [[https://www.hyperoptic.com/legal/post/privacy-and-cookie-policy/|Privacy and Cookie Policy]] applies in addition to the notes listed here.

<panel>
**Operational Guidelines**

  * We do not censor or restrict access to any Internet destinations, unless these restrictions aim to prevent the spread of malware
  * We do not record information that could identify a user's exact activity (including, but not limited to, DNS queries or connected IP addresses)
  * We permit high-level traffic analysis to aid in troubleshooting connectivity issues

</panel>

[[net/host/ubnt-edgerouter]] is configured to perform Deep Packet Inspection for Traffic Analysis. The "DPI engine recycles data after 30 minutes of inactivity" and does not collect information about the traffic's content, only information about the service used & traffic quantity is collected. Please see Ubiquiti's [[https://help.ui.com/hc/en-us/articles/204951104-EdgeRouter-Deep-Packet-Inspection-Engine|EdgeRouter - Deep Packet Inspection Engine]] article for more information.

[[net/host/ubnt-unifi]] is configured to retain non-time series data on Wi-Fi clients for *365 days*, with time series data being downsampled over time.

^ Granularity                            ^ Retention Period   ^ 
| Time Series with 5 Minutes Granularity | 7 days             |
| Time Series with Hourly Granularity    | 30 days            |
| Time Series with Daily Granularity     | 180 days           |
| Time Series with Monthly Granularity   | 365 days           |

{{page>[policy:privacy:cctv]&nofooter&noindent}}

### Voice Assistants
#### Siri: Apple TV
Siri on Apple TV (for [phy/livingroom/appletv](phy/livingroom/appletv) and [phy/bedroom-htw/appletv](phy/bedroom-htw/appletv)) does not use a wake word and requires manual activation. Please see [[https://support.apple.com/en-uk/HT205300|Using Siri on your Apple TV]] and [[https://www.apple.com/uk/legal/privacy/data/en/ask-siri-dictation/|Ask Siri, Dictation & Privacy]] for more information.

#### Siri: HomePod
The following rooms have an Apple Siri voice assistant configured with the **Hey Siri wake word**.

  * [[phy/bedroom-htw/]]
  * [[phy/kitchen/]]

Siri voice recordings have a retention period of **6 months** (minimum permitted). [Voice recognition for Personal Requests](https://support.apple.com/en-gb/guide/homepod/apd1841a8f81/homepod) is enabled for HomeKit members. Please see [[https://support.apple.com/en-gb/guide/homepod/apd99ee29027/homepod|HomePod privacy and security]] and [[https://www.apple.com/uk/legal/privacy/data/en/ask-siri-dictation/|Ask Siri, Dictation & Privacy]] for more information.

If preferred, HomePods can [electronically disconnect their microphones](https://support.apple.com/en-gb/guide/homepod/apd99ee29027/homepod#apd9ea83e94c) or be unplugged from the wall.


### Home Automation
fixme: HomeAssistant retention period

<panel>
**Operational Guidelines**

  * Home automation routines should avoid centrally tracking a user's position (e.g. sensing a mobile phone's Bluetooth emissions) and should favour user-initiated routines (e.g. fixed-position Bluetooth beacons).

</panel>