Privacy

Last updated 28 September 2026

DirectorLink keeps your home's data between your own devices and your controller. This page lists exactly what reaches DirectorLink's servers.

On your home network

The app talks to the DirectorLink driver on your controller directly, over your home network. Device names, states, commands and camera pictures do not pass through our servers. The app keeps its settings, its access key and the controller's address in your browser only.

Signing in with Google or Apple

Signing in is optional. It is for using your home away from the home network and for inviting family. When you sign in, Google or Apple tells us your account ID with them, your email address and your name (Apple sends the name only the first time, and may give an address of its Hide My Email relay instead of yours). We ask for nothing else, never see your password, and use these only to know which homes your account belongs to and to match invitations. If you add Apple to your account in the app's Settings (or Google to an Apple account), both sign in to the same DirectorLink account; otherwise each is its own account. We do not sell or share any of it, and there are no ads, tracking or analytics.

A device that has never signed in does not contact our account service at all.

What our servers store

• Your account: your Google and/or Apple account ID, email address and name, and when you signed in.
• Sessions: a random identifier, kept only as a hash, for 30 days or until you sign out.
• Homes: which homes your account owns or belongs to, and since when.
• Invitations waiting to be accepted: the invited email, who made it and the expiry date. A used invitation is deleted when it is accepted, an expired one a day after it expires.

Our servers run on Cloudflare, which keeps short-lived technical logs (time, IP address, path and status) to keep the service running.

Remote access

Remote access is off unless you switch it on in Composer. Then the controller keeps one outgoing connection to api.directorlink.io, encrypted with TLS, and your signed-in devices reach your home through it. Every request and answer is also locked end to end, with keys that only your devices and your controller hold: our servers pass them along but cannot read or change them, and store none of them. What our servers do see is which account talks to which home, when, and how much data.

Cookies

api.directorlink.io sets one cookie that keeps you signed in, and one for ten minutes while you sign in. None can be read by the app's pages. The app and this website set no cookies.

Deleting your data

Signing out ends the session on that device. Settings → Account → Delete account in the app deletes your account and signs out all your devices.

Contact

DirectorLink is open source. Questions go to github.com/IsraelCIL/DirectorLink/issues.