Privacy Policy
Minascode Headscale · Effective 3 October 2026
This policy explains what information Minas Code ("we", "us") processes when you connect a device to Minascode Headscale, our self-hosted Tailscale-compatible network (the "Service"), and how that information is used.
Information we process
| Category | Examples | Why |
|---|---|---|
| Account identifiers | Email address and a stable provider identifier if you sign in with a third-party identity provider; or a one-time enrollment key for a device | To authenticate you and authorize your devices |
| Device information | Device name, operating system, and the public keys the client generates | To register and identify your device on the network |
| Network / connection data | Assigned private IP, IP addresses observed, connection timestamps, online/offline status, routing and exit-node selections | To operate the network, route traffic, and keep it secure |
| Support communications | Messages you send us | To respond to your requests |
Traffic between your devices is end-to-end encrypted. We do not inspect the contents of that traffic. When you choose to route your internet traffic through an exit node, that traffic egresses through the operator's network or VPN provider as selected by the operator; we do not log browsing destinations.
How we use it
- To provide, secure, and operate the Service.
- To authenticate users and devices and enforce access rules.
- To prevent abuse, troubleshoot faults, and maintain availability.
- To comply with legal obligations.
How we share it
We do not sell your personal information. We do not share it except: (a) with your direction or consent; (b) as needed to operate connectivity — for example, public relay servers operated by third parties may be used to establish connections when a direct path is unavailable; and (c) where required by law or to protect the Service and its users. Identity-provider sign-in is handled directly between you and that provider under their own privacy policy.
Retention
Account and device records are kept while your access is active and for a reasonable period afterwards for security and record-keeping, then deleted. Aggregated, non-identifying operational data may be kept longer.
Security
The Service runs on infrastructure controlled by Minas Code. Access to control systems is restricted to administrators, and credentials are managed in a secrets manager. No system is perfectly secure, and we cannot guarantee absolute security.
Your choices and rights
You may request access to, correction of, or deletion of your personal information, and you may ask us to remove a device from the network at any time. Contact us using the details below.
International use
The Service is operated from Minas Code infrastructure and may use exit nodes or relays in other countries; your information may therefore be processed outside your own country.
Changes
We may update this policy from time to time. The "Effective" date above will change when we do.
Contact
Minas Code · Email: admin@minascode.com