Privacy
This page describes what TopoLogic stores about the people who use it. TopoLogic is self-hosted software: each instance is run by an organisation, which is responsible for the personal data in it.
Who is responsible
The operator of this instance has not published its name or a privacy contact yet. Until it does, ask the administrator who invited you. (Operators: set TOPOLOGIC_OPERATOR_NAME and TOPOLOGIC_PRIVACY_CONTACT.)
What is stored about you
- Your account: your name, email address, a one-way hash of your password (never the password itself), your date format, time zone and level-of-detail preference, and when the account was created.
- Your memberships: which organisations you belong to and your role in each.
- Sign-in sessions: a hash of each session token and its expiry date. Sessions last 30 days from your last visit, or until you sign out or change your password.
- Failed sign-in attempts: to slow down password guessing, the email address and network address used for failed attempts are counted for 15 minutes, then discarded.
- Activity history: changes you make are recorded with your name, the time and what changed, so that an organisation can see who changed its records.
- Invite and password-reset links: stored only as hashes, valid for 7 days and 24 hours respectively, and usable once.
Everything else in TopoLogic (devices, networks, workloads, plans) describes an organisation's infrastructure and belongs to that organisation.
Why
Account and session data let you sign in and keep your work attributed to you. Failed-attempt counts protect accounts. Activity history lets an organisation review changes. Nothing is used for advertising, profiling or analytics.
Cookies and browser storage
TopoLogic uses no tracking, analytics or advertising, and loads nothing from other websites, so no consent banner is needed for those purposes. It stores:
| Name | Where | Purpose | Lasts |
|---|---|---|---|
| tl_session | Cookie (HTTP-only) | Keeps you signed in. Strictly necessary. | 30 days from last visit |
| tl_sidebar | Cookie | Remembers whether you collapsed the sidebar. | 1 year |
| tl-theme, tl-contrast, tl-scale, tl-grid, tl-canvas-wheel | Browser storage | Display preferences you choose on this device. | Until you clear them |
| tl-tour-offered, tl-recent:… | Browser storage | Whether the tour was offered; records you recently opened from search. | Until you clear them |
| tl-viewport:… | Tab storage | Where you were on a network diagram, for when you return. | Until the tab is closed |
Browser storage stays on your device and is never sent to the server.
Sharing
TopoLogic sends no data to other services. Other members of your organisations can see your name and the changes you make. People with a read-only API token for an organisation can read its infrastructure records, not account details.
Seeing, correcting and removing your data
- Change your name and preferences under Account and preferences.
- Download what TopoLogic holds about you as a file from Account and preferences → Your data.
- Delete your account from the same place. History entries you made remain, attributed to “Deleted user”, so that organisations keep an accurate record of changes.
- Anything else, such as correcting history or removing data from an organisation, goes through the operator above.
Security
Passwords and tokens are stored only as hashes, session cookies cannot be read by scripts, and every page is served with a strict content security policy. How the server, database and backups are protected is up to the operator.
Changes
This page describes TopoLogic as of 13 October 2026. It changes when the software changes what it stores.