Trust and security
What we do with your trust.
Plain statements, no badges we haven't earned. Where something is a principle we're building toward, rather than something already in place, we label it.
This website
- No tracking
- We run no analytics, advertising or tracking scripts on this site, and set no tracking cookies.
- Fonts from our own server
- Our typeface is served from this site, so visiting doesn't send your address to a third-party font provider.
- Forms store what you type, and no more
- The waitlist and contact forms keep the details you submit so we can reply or let you know when your place opens, and they are used for nothing else.
The Aviary application
Design principles- Local-first
- Applications, versions and data are meant to live on your device. A service never silently replaces something you hold.
- Nothing removed remotely
- A release you've installed is kept until you delete it. If a version is found to be vulnerable, you're asked to confirm before running it. We don't delete it from your machine.
- Verified before it runs
- Downloads carry signatures and integrity checks. Plugins declare what they can reach and can't quietly widen it.
- Reports are private by default
- When you report a problem, it's visible to you and the people fixing it. You choose whether to share it more widely.
- A person decides what ships
- Fixes are reviewed and checked before they go further. The person who reported a problem can try the fix first and approve it or send it back.
Aviary Hosting
- Separated servers
- Each game server runs in its own container as an unprivileged user, with fixed CPU, memory and process limits, so one server can't take another down.
- Memory isn't oversold
- The RAM in your plan is reserved for your server. We stop selling a plan when no machine has the memory to place it.
- Backed up off the machine
- Game servers are backed up to separate storage, and we test restores from those backups to check they work.
- Watched around the clock
- Every machine is monitored, and a problem sends us an alert.
- Admin access is locked down
- Management systems are reachable only over a private network, with two-factor sign-in, and any new administrator account raises an immediate alert.
When something goes wrong
- Tell us
- Hosting customers raise a ticket from their billing account. Everyone else can email us. Describe what happened and we'll take it from there.
- What we look at
- Access to customer files is limited to a specific, necessary purpose, and we normally explain a proposed inspection to you by email first. Our privacy policy sets out the detail.
- Treated with care
- Attachments and report text are treated as untrusted input and handled carefully, because reports can be a way in.
Company and policies
Aviary Technologies Ltd is registered in England and Wales, no. 17277024. Our terms, privacy policy and refund policy set out the commitments in full. To raise a security concern, email info@aviarytechnologies.co.uk. For questions about personal information, use privacy@aviarytechnologies.co.uk.