HushOS push relay
This service wakes the HushOS apps on iPhone and Android when something happens in an account, such as a new sign-in or a file shared with you. Apple and Google deliver notifications to an app only from its publisher, so HushOS servers with notifications turned on, hushos.com or one you run yourself, send their wake-ups for phones through here by default. Phone notifications are still being built and aren't switched on yet.
What a wake-up carries
A random event ID and a short label for the account. Never what happened, who it involves or a file name. The app fetches the event from its own server, over its own connection, and writes the notification itself. On iPhone, Apple shows "New activity in HushOS" if the app can't.
Apple and Google see that a HushOS app on a device got a wake-up, when, and the label, which stays the same for each account on that device.
What this service keeps
- On disk: one entry for each account signed in on each phone. It holds the delivery code Apple or Google gave the phone, which of the two it is, and scrambled (hashed) copies of a random ID and a deletion key the phone was given. No account, email, name, server address or times.
- In memory, to limit abuse: the addresses of servers and phones that used it and when, kept at most about an hour after their last use. In that hour, the times could link a phone's last wake-up to the server that sent it.
- Logs: its own logs are hourly counts, and the proxy in front of it keeps none.
So it learns that a phone got a wake-up, from which server address, when, and whether it was a security notice. When Apple or Google report a phone gone, its entries are deleted; copies in backups go when those backups expire.
Running your own HushOS server?
With notifications turned on (NOTIFICATIONS_ENABLED), your server sends
wake-ups here for phones signed in to it. To send none, set
PUSH_RELAY_URL to an empty value: the apps will then show notifications
only while they are open. Browsers don't use this service: your server sends to the
browser's own push service.