Where your data lives
- Account and message data are stored in the European Union, in a Cloudflare D1 database created in the EU jurisdiction.
- Messages are deleted from our database after 90 days. Webhook payloads are deleted a week after delivery.
- Requests travel over HTTPS through Cloudflare's network. Messages then travel through Apple's iMessage service between the line and the person's device.
- Blueping is independent and not affiliated with Apple. Apple has no public iMessage API.
Keys and sign-in
- We keep a SHA-256 hash of your API key, never the key itself, and show the key to you once.
- There is no password. You sign in by texting LOGIN, which sends back a link that works once and expires after fifteen minutes.
- Creating a new key revokes the old ones at once.
Webhooks
- Every webhook carries a Blueping-Signature header: an HMAC-SHA256 of the timestamp and the raw body, keyed with your secret.
- Reject requests older than five minutes. Failed deliveries are retried after 30 seconds, 2 minutes, 10 minutes, 1 hour and 6 hours.
Consent on the line
- Nobody gets a message they didn't ask for: people join an app by texting its code.
- STOP unsubscribes a person from every app on the line, and apps are told by webhook.
- An app can send five messages in a row before the person replies, and only sees its own contacts.
Reporting a problem
- Write to hello@blueping.dev. Include how to reproduce the issue; we answer every report.