Privacy Policy

Last updated: September 21, 2026

Socketo operates the Socketo service and website at socketo.dev. This policy explains what information we process when you use the service and how to contact us about it.

Information we process

Your account

When you sign in with GitHub or Google, we receive the profile information that provider makes available, such as your name, email address, avatar, and provider account ID. We also store OAuth tokens when the provider supplies them so that your account can remain connected.

We create a session for each sign-in. Session records can include a session token, expiry time, IP address, and user agent.

Your workspace and apps

We store the information needed to provide the service: team names and members, app names and settings, app keys and secrets, and subscription status.

Connection and usage data

To operate an active WebSocket connection, Socketo processes socket IDs, channel subscriptions, and presence data supplied by your application. This connection state is associated with the active connection and is removed when it closes.

We record service telemetry for operation, billing, and diagnostics. This can include your team and app IDs, event names, channel names, message size, delivery count, and request outcome. Socketo does not intentionally store WebSocket message payloads as application content.

Payments

Payments are handled by Polar, which acts as the merchant of record. Socketo does not receive payment card or bank account details. We receive billing and subscription information needed to provide the service, such as a customer identifier, email address, subscription status, and usage information.

How we use information

We use information to:

• provide, secure, and maintain Socketo;
• create and manage accounts, teams, and applications;
• measure service usage and show dashboard statistics;
• manage subscriptions and support requests; and
• investigate abuse, fraud, and service issues.

Service providers

We use the following providers to run the service:

We do not sell personal information.

Retention

We retain account, workspace, app, billing, and usage records for as long as needed to operate the service, meet legal obligations, resolve disputes, and enforce our agreements. Active WebSocket connection state is removed when the connection closes. Retention periods may differ by data type and provider.

Cookies

Socketo uses cookies needed for authentication and OAuth sign-in, including session and OAuth state cookies. We do not use advertising cookies. Website visits are measured with self-hosted, cookieless Umami analytics.

Security

We use reasonable technical and organizational measures to protect information. No online service can guarantee absolute security. Keep your app secrets confidential and contact us promptly if you believe your account or credentials have been compromised.

Your choices and rights

You may contact us to ask about your personal information, request a correction or deletion where applicable, or raise a privacy concern. Your rights depend on the laws that apply to you and the request.

Socketo is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Changes and contact

We may update this policy as the service changes. The date above shows the latest revision.

For privacy questions or requests, email support@socketo.dev.