Dashboard

Privacy Policy

Effective July 3, 2026 · Lomita Labs

What we collect

DataExamplesWhy
Account data Email, name, password hash — or your Google account email if you sign in with Google. Session cookies. Sign-in, linking Devices to your dashboard, alert emails you enable.
Environmental telemetry Temperature, humidity, pressure, soil readings, rain, wind, device GPS position, battery/solar health, radio signal quality, firmware version, timestamps. Your dashboard and history, fleet health, forecasts and analytics, and commercial data products (see below).
Basic logs IP address and user agent in short-lived server logs. Security and abuse prevention.

We don't run third-party ad trackers or analytics scripts on the dashboard.

How environmental data is used

Environmental telemetry is the product of our sensor network. Lomita Labs retains it indefinitely and may aggregate, analyze, license, and sell environmental data and derived products (for example regional frost forecasts or microclimate datasets) to third parties. When we do, it is keyed to device and location — never to your name, email, or account identity.

What we do not do

Processors we rely on

Cookies

One session cookie (lomita_session) keeps you signed in. No advertising or cross-site cookies.

Retention and deletion

Account data is kept while your account exists. Environmental telemetry is retained indefinitely as part of the network dataset, including after a Device is unclaimed or an account is closed (it is no longer linked to the closed account). To close your account or ask a data question, email peter@moe-lange.com.

Security

Passwords are stored as salted PBKDF2 hashes. Device radio traffic is encrypted per-device (AES-CCM) and gateways hold no decryption keys. Sessions use HttpOnly cookies over HTTPS.

Changes

Material changes will be posted here with a new effective date.