Privacy
Your files are none of our business.
Loft is built so we never need your files, your passwords or your habits. Here is everything we, and the services we use, can see.
Your files
Your files go from your device to your gateway and on to your NAS. All three are yours. They never pass through Incremental, and we have no copy and no access. If you use a tunnel for access away from home, the tunnel provider can read that traffic. That's the provider, not us. How it works has the details.
Your password
Your NAS password goes only to your own gateway, over a connection pinned to its key. The gateway stores it encrypted, and it's useless without your signed-in device. We never see it.
The apps
The Mac, Windows and Linux apps, and the Android APK from this site, look for a new version on this site, at most once a day. The Mac app reads loft.incremental.no/appcast.xml, the others loft.incremental.no/releases.json. That request is the only one any Loft app makes to us. It's a plain download of one file: no account, no device ID, nothing about your gateway or your files. At most, it says which app and which version is asking. You can turn it off in the app's settings.
When the Mac app finds a new version, it asks you first, and nothing downloads until you choose to install it. Then it downloads the update from GitHub, checks that it's signed by us, installs it and reopens. Like any download, GitHub sees your IP address and which file you asked for.
The iPhone and iPad app updates through the App Store, where Apple's privacy terms apply, and Loft from Google Play updates through Google Play, where Google's do.
This website
No cookies, no analytics, no tracking, no fonts or scripts from anyone else. The light/dark setting is stored in your own browser and never sent anywhere. The site is served by Cloudflare, and app downloads come from GitHub. Like any host, they see your IP address and which file you asked for. We add nothing on top.
Pairing links
The pairing details in a link stay after the #, and browsers never send that part to a server. The /pair page doesn't read it either.
Questions
Incremental AS is responsible for this website and for the Loft apps. Write to hello@incremental.no.