Data & privacy

Data processing

What Linuen keeps, where, for what, and what is never shared.

This page describes the product's current state; items not yet decided (final hosting, contractual commitments) are indicated as such and do not constitute a legal commitment.

Account protection

  • Mandatory two-step sign-in: password, Google or Apple, then a temporary code (TOTP) from an authentication app, with ten single-use backup codes.
  • Bounded sessions (eight hours maximum, thirty minutes of inactivity), revocable from the account; sensitive operations require recent authentication.
  • Second-factor secrets encrypted at rest; no automatic account linking by simple email address match.

These protections describe what is actually in place; they do not constitute a certification or a guarantee of absolute confidentiality.