Privacy policy
Current Android and browser data handling, permissions, retention and requests.
Updated September 7, 2026. This policy covers the native Network Sentinel Android app and the hosted Sentinel monitoring console provided by ASL LLC / AutoSecureLogin. Contact contact@autosecurelogin.com for AutoSecureLogin-hosted privacy questions; your deployment administrator controls its monitoring data and retention.
Local scan: the Android app checks responding devices on your selected private Wi-Fi with limited TCP checks and advertised local-service discovery on Android 13 or newer. It does not upload these scan results, attempt device logins, block devices, collect Wi-Fi passwords or request location permission. Results remain in app memory and are cleared when you leave the scan or the process ends. No advertising or analytics SDK is included.
Connected monitoring: choosing Connect with an access key contacts the configured Sentinel service over HTTPS. Your access key is exchanged for a short-lived session. Android saves only that session token encrypted with a non-exportable Android Keystore key; a saved session reconnects when you reopen the app. The hosted service stores authorized agents’ device names, IP and MAC addresses, network identifiers, observations, alert history and access audit records. Assigned roles control visibility and updates.
Browser console: its short-lived token and last-seen alert timestamp use tab session storage. The raw access key is not persisted by the ordinary browser console. Public shell/help pages may be cached for offline reading; authorized API responses are excluded from that service-worker cache. Lock the console when finished, particularly on shared computers. The English or Spanish language preference is saved locally in the app or browser and contains no inventory data.
Optional Android notifications: enabling native alerts registers the installation with Firebase Cloud Messaging and Sentinel. Firebase processes the registration token and alert message content for delivery, and Sentinel stores the token. Android notification permission is required where supported. Turn alerts off in the app or Android settings. Disabling them or logging out stops local display; removing the server registration requires a working connection. Browser notifications separately require browser permission and a running console.
Permissions and providers: network access supports local connection checks and optional hosted monitoring; network-state access selects Wi-Fi; notification permission is optional. Sentinel does not sell monitoring data or use it for advertising. The authorized deployment handles monitoring records; Google Firebase handles enabled native push delivery; your selected file or cloud provider handles exported reports. Public-site hosting receives ordinary connection information needed to serve requests and operate the service.
Exports and storage: inventory PDFs contain network information and are not encrypted by Sentinel. You choose where to save or share them. Android private data is excluded from system backup. Uninstalling or clearing app storage removes the local session but does not delete exported files, server monitoring records or copies held by recipients.
Retention and deletion: use Lock and log out to remove local access. Contact the deployment administrator for access changes, correction or deletion of hosted inventory, audit records, alerts and registrations. Retention depends on that deployment’s configured retention and backup policies; no universal deletion period is promised. For AutoSecureLogin-hosted requests, email contact@autosecurelogin.com with enough non-secret information to identify your deployment and request. Verification may be required before private records are disclosed or changed.
Security and updates: keep your device and access credentials protected, and do not post private inventories publicly. This policy will be updated when data handling changes. The current website policy is available at https://sentinel.autosecurelogin.com/privacy.html.