Back to Home

Privacy Policy

Effective Date: June 28, 2026

This privacy policy describes how your personal information is collected, used, and managed when you access the website bothahome.co.za and any of its associated subdomains or hosted web services.

1. Authentication & Single Sign-On (SSO)

To secure access to our self-hosted home services, media applications, and server dashboards (such as Immich and other management panels hosted under subdomains of bothahome.co.za), we utilize external Single Sign-On (SSO) services:

This authentication mechanism is used exclusively to control and grant access to private, authorized family services without the need to create, store, or transmit traditional passwords that could be compromised.

2. Information Collection and Use

When you log in via Google OAuth or Microsoft 365 OAuth, we receive basic identity information returned by the authentication provider:

This data is used solely to verify your identity and grant access privileges to the requested private service. We do not sell, rent, or distribute this information to third parties, nor do we use it for advertising or marketing campaigns.

3. Data Retention

Authentication sessions are tracked using secure, encrypted cookies. Identity information is retained only as long as necessary to keep your active session valid or to maintain access control settings. Once you log out, session tokens are invalidated.

4. Security

We implement strict security measures to protect the integrity of our hosted services and authentication tokens. Connections to all subdomains of bothahome.co.za are encrypted using HTTPS (SSL/TLS). However, please note that no transmission method over the internet or system of electronic storage is 100% secure.

5. Analytics

To monitor general site health and traffic on our public landing page without tracking visitors, we utilize Cloudflare Web Analytics. This analytics tool is privacy-focused, does not use cookies, and does not collect personally identifiable information (PII).

6. Compliance with POPIA & GDPR

We process authentication details in accordance with the Protection of Personal Information Act (POPIA) of South Africa and the General Data Protection Regulation (GDPR) of the European Union. We ensure that personal data is processed transparently and strictly for the legitimate purpose of system access control.

7. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our hosted services. We will notify you of changes by updating the effective date at the top of this page.

8. Contact Us

If you have any questions about this privacy policy, please contact us using the information provided on the main page.