Privacy

flutterwatch is a small independent project. It keeps the least it can get away with: enough to tie engine downloads to an account, and nothing about the apps you build or the people who use them.

What an account stores

Signing in uses GitHub OAuth, requesting only the user:email scope — that grants your identity and email address and nothing else. It gives no access to your repositories, private or public. From it we keep:

  • Your GitHub numeric id and username.
  • Your verified GitHub email address, when GitHub supplies one.
  • The optional profile fields offered when you join the beta — name, company, position, and what you plan to build. Every one of them is optional and blank is fine.
  • Any message you send through the contact form, with its category.

API tokens

A token is stored only as a SHA-256 hash. The plaintext is shown once — to the CLI when you sign in, or in the dashboard when you create a key — and is never written to the database. Alongside the hash we keep a short non-secret prefix so you can tell your keys apart in a list, and the time a key was last used. A lost token cannot be recovered, only revoked and replaced.

On your own machine the token lives in ~/.flutter-watchos/credentials.json with file mode 600. flutter-watchos logout deletes it.

Download records

Each engine-artifact request is logged with the engine version and file requested, the time, the account it belonged to, and whether it succeeded or was refused. That log is what ties gated downloads to accounts, and it tells us which engine versions are actually in use so old ones can be retired without stranding anyone.

What is not collected

  • No passwords — sign-in is delegated to GitHub, which never shares your credentials with this service.
  • No IP addresses or user agents are recorded in the service database. Cloudflare, which hosts the service, necessarily processes connection metadata in order to deliver the request at all.
  • The command-line tool sends no telemetry. It reports no usage, no analytics, and no record of what you build.
  • The engine contains no telemetry. Apps you ship never phone home, and nothing whatsoever is collected from the people who use them.

This website

The site is pre-rendered static HTML and CSS. The one piece of JavaScript on it is Google Analytics, which sets cookies and reports page views to Google so we can see roughly how many people find the project. Blocking it costs you nothing — the entire site works without it, and the parts that matter are hosted on GitHub and pub.dev anyway.

Who else sees this data

  • Cloudflare — hosting, database, and artifact storage.
  • GitHub — sign-in.
  • Google Analytics — page views on this website only. It sees nothing about your account or your downloads.
  • Resend — used only to deliver email we send you directly, such as a welcome message.

Nothing is sold, and nothing is shared for advertising.

Getting your data removed

Ask through the contact form on your dashboard and the account, its profile fields, its tokens, and its download history will be deleted. Revoking a single key without closing the account can be done from the dashboard at any time.

Changes

flutter-watchos is in closed beta and the service is still moving. If what is collected changes, this page changes with it — and anything genuinely new will be called out in the release notes rather than quietly appearing here.

Last updated 19 July 2026.