Privacy

Warmhole keeps as little as it can. This page explains what it stores, what it never stores, and how to reach me.

Who runs Warmhole

Francesco Traversa, frakle94+warmhole@hotmail.it. Warmhole is an independent beta project, not a company product.

What Warmhole stores

• Your account: the Airzone email you use to sign in (it identifies your account), a hash of your Warmhole password (never the password itself), the date it was created and whether you are the site administrator.
• Your home: an internal identifier, the name of the home, whether it is enabled or disabled, the creation date, and an identifier derived from your email.
• Sign-in sessions: a random token stored only as a hash, with its expiry date.
• Box connection: whether your box is connected right now and since when. This is not kept after the box disconnects.
• A cache of your system: to open the app quickly, Warmhole keeps the last data it read through your box: the names of your rooms, their last temperature, humidity, setpoint and mode, and your schedules. Each new reading replaces the previous one.
• On your phone: the app keeps the same last state and schedules, and the email you signed in with, in your browser's storage, so it opens instantly. It is removed when you log out.
• Technical data for security: your IP address is used for a short time to limit repeated sign-in attempts. Warmhole does not keep a log of it.

What Warmhole never stores

• Your Airzone password.
• Your Wi-Fi name or password.
• Airzone access tokens.
• Your Warmhole password in clear text.

Where your Airzone password goes

• You type your Airzone email and password, and your Wi-Fi details, only in the setup page of your box.
• They stay stored on the box, in your home.
• The box signs in to Airzone Cloud by itself and sends the requests to Airzone from your home network.
• When Warmhole needs to check that the box really belongs to your Airzone account (first setup, or after a reset), the box sends only a temporary token it received from Airzone. Warmhole uses it once to ask Airzone which email it belongs to, compares it with yours, and does not save it.
• Every time it connects, the box identifies itself to Warmhole with your email and your Warmhole password. The password is checked against the stored hash and not kept.
• So the Warmhole password is the only one that travels over the internet to this site: choose one that is different from your Airzone password and from your email password.

Why this data is used

• to let you sign in;
• to run the service and send each request to the right box;
• to keep the service secure and prevent abuse;
• to help you when you ask for technical support.

The data is used because it is needed to provide the service you asked for, and, for security and abuse prevention, because of the legitimate interest in keeping the service safe. Nothing is used for advertising or profiling, and no data is sold.

Services involved

• Cloudflare hosts Warmhole and its data, and handles the network traffic.
• Airzone Cloud receives the requests your box sends from your home, as it does for the official app.
• Stripe, only if you choose to open the "Support Warmhole" link. The payment page is run entirely by Stripe: Warmhole does not receive your card details.

Each of these services handles data under its own privacy policy. Some of them may process data outside the European Union.

How long data is kept

• Sign-in sessions: 30 days, or until you log out.
• Account, home and cache of your system: as long as your account is active, or until you ask for deletion.
• Data on your phone: until you log out.

Your rights

You can ask to see your data, to correct it, or to delete your account and its data. Write to frakle94+warmhole@hotmail.it.

To request deletion of your Warmhole account and associated data, email frakle94+warmhole@hotmail.it from the email associated with the account.

When your account is deleted, all its data is removed from the site: your account, your home, your sign-in sessions and the saved data of your system (rooms, last state, schedules), and your box is disconnected. Then unplug your box or reset it (hold its button for 8 seconds): otherwise it will register again. The copy on your phone is removed when you log out.

You can also contact your data protection authority if you think your data is not handled correctly.

Cookies

Warmhole uses one cookie only: the session cookie that keeps you signed in. It is strictly necessary, so there is no cookie banner. There are no analytics, advertising or tracking cookies, and no third-party scripts.

Changes

If this page changes in a way that matters, the change will be visible here. Last updated: 30 October 2026.