Privacy

WME Sync stores only what it needs to sync your userscript data:

• Your account: email, name, and your sign-in methods (password hash, passkeys, linked Discord account, two-factor settings).
• Waze usernames you link, with a hash of each PIN (never the PIN itself).
• Script tokens: hashes of the tokens your scripts use, an optional label, and when they were last used.
• Synced data: whatever JSON your userscripts choose to store. You can view, download and delete it at any time from the Data page. Unlinking a Waze username deletes all of its data.
• Security log: sign-ins and account changes, with IP address and browser, so you can spot unexpected activity. The last 200 events are kept per account.
• Failed PIN attempts (username and IP) for brute-force protection, deleted after 24 hours.

Cookies are used to keep you signed in. Analytics cookies (PostHog) are only set if analytics are enabled on this deployment and you accept them.

Nothing is sold or shared with third parties. Emails are sent through Cloudflare Email Sending.