← Matter Manager

Privacy notice

Matter Manager is a catalogue for the commissioning QR codes of Matter smart-home devices. This notice covers this website and the hosted Matter Manager application at app.matter-manager.io: what personal data each collects, why, for how long, and who else sees it — including the data we receive when you sign in with Google.

Controller

TinyApps Inc., Alder Estate #1471, Taguig, NCR, The Philippines — hello@matter-manager.io.

What we store

If you join the waitlist

We store your email address, the language the site was shown in, which page you signed up from, and the date. Nothing else. We do not store your IP address.

If you hold a Matter Manager account

Accounts do not exist yet — Matter Manager is pre-alpha and 1.0 has not been released. This section describes the hosted service as it is being built, so that you can judge it before signing up rather than afterwards.

An account is required to use Matter Manager, and you create one by signing in with your Google account. The account holds your Google account identifier, your email address, a display name — taken from your Google profile the first time you sign in, and yours to change afterwards — and your language preference. We never see or store your Google password. Google user data below says exactly what Google sends us and what we do with it.

It also holds the catalogue itself, because that is what the account is for: the Matter codes you store, including their setup passcodes, together with device names, rooms, device types, installation dates, serial numbers, photos you attach, remarks you write, and when each of those last changed. Setup passcodes are stored unencrypted, protected by database isolation and transport security — a deliberate, documented trade-off written up in SECURITY.md, so that you can weigh it yourself.

Synchronising between your own devices needs a record of which device has seen which version of a project. We keep that and nothing further about your devices: no advertising identifiers, no fingerprints, no location.

Manufacturer and device information

When a code is added to a catalogue, we also record which kind of device it commissions: the manufacturer and the product, as the vendor and product identifiers the Matter code itself carries. This record is kept without any link to you — no account identifier, no catalogue reference — so it tells us which manufacturers and devices Matter Manager is used with, and nothing about who uses them.

The code decoder on this site

The Matter code decoder on the home page runs entirely in your browser. Codes you paste into it — including their setup passcodes — are never transmitted to us, never logged and never stored.

Google user data

Matter Manager offers Sign in with Google as its way of creating and signing in to an account. This section describes everything we receive from Google and what happens to it.

What we receive

We ask Google for three scopes and nothing more:

• openid — a stable identifier for your Google account, so that we can recognise you the next time you sign in;
• email — your email address, and whether Google has verified it;
• profile — your name and profile picture.

We do not request access to Gmail, Drive, Contacts, Calendar or any other Google service, and we cannot read, change or delete anything in your Google account.

How we use it

• The identifier is the key of your Matter Manager account. It is how signing in finds your catalogue.
• Your email address is stored with your account. It is how people find you when they share a project with you or hand one over to you — an invitation is accepted only by a signed-in account whose Google-verified address matches — and it is where we write to you about your account.
• Your name becomes your default display name, shown beside the remarks you write and to the people you share a project with. You can change it in your profile; once you have, a later sign-in does not overwrite it.
• Your profile picture is received as part of the profile scope and discarded. We do not store or display it.

We use Google user data only to provide and secure Matter Manager's sign-in and the features described above. We do not use it for advertising, we do not sell it, we do not build profiles from it, and we do not use it to develop, improve or train generalised or non-personalised AI or machine-learning models.

How we handle it

Sign-in uses the OAuth 2.0 authorisation-code flow with PKCE. The exchange with Google happens server to server, over TLS; your browser never sees our client secret. We verify the signature on the identity token Google returns, read the fields above out of it, and discard it. We do not keep Google access or refresh tokens, and we never call Google on your behalf after you have signed in. Our own session with you is a separate, short-lived token that we issue.

Sharing

We do not transfer Google user data to anyone, except: your display name and email address are visible to the people you choose to share a project with; to the service providers named under Hosting and processors, only as needed to run the service; and where the law requires it. We never sell it or pass it to advertisers, data brokers or information resellers.

Retention and deletion

Google user data is kept for as long as your account exists. Deleting your account deletes it, as described under Deleting your account; you can also ask us to delete it by emailing hello@matter-manager.io. You can revoke Matter Manager's access at any time at myaccount.google.com/connections — that stops future sign-ins through Google, but does not by itself delete the data we already hold, so ask us to do that as well if you want it gone.

Limited Use

Matter Manager's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Why

The waitlist address is used for exactly one thing: to tell you once, on the basis of your consent, when Matter Manager 1.0 is released. We do not send a newsletter and we do not share the list with anyone.

Account data is processed in order to provide the service you asked for — performance of our contract with you, in the language of the GDPR. We do not profile you, we do not advertise to you, and we do not use your catalogue to train anything.

How long

Waitlist addresses: until you ask us to remove you, or until twelve months after the 1.0 release announcement, whichever comes first.

Account data, including the Google user data above: for as long as the account exists. What happens after that is under Deleting your account below.

Sharing

You can share a project with other people. Doing so shows them what is in it, setup passcodes included — there is no way to share a catalogue's usefulness while withholding the codes that make it useful. You choose who, you choose read-only or read-write, and you can withdraw access at any time. We never show a project to anybody you have not invited.

We do not sell personal data and we disclose it to no one else, except where the law requires it or where a processor named below needs it in order to run the service.

Deleting your account

You can delete your account from inside the application. That deletes your account record — your Google account identifier, email address and display name — and your projects, devices, codes, photos and remarks. Where a copy exists in a backup it is overwritten as that backup ages out, within thirty days.

A project you had shared is handed over or removed rather than left orphaned; you are asked which at the point of deletion. Anything you exported as a PDF is yours and is unaffected — it was never on our servers.

Your rights

You may request access to, correction of, or erasure of your data at any time by emailing hello@matter-manager.io. You may also ask for a copy in a portable format, object to processing, or withdraw consent you gave.

You may complain to a supervisory authority: the Philippine National Privacy Commission, under the Data Privacy Act of 2012, or the data protection authority where you live.

Cookies and tracking

This site sets no cookies, runs no analytics, loads no fonts or scripts from other servers, and contains no tracking pixels. Your theme preference is kept in your own browser's local storage and never sent anywhere.

Hosting and processors

This site is hosted on Cloudflare Pages and the waitlist is stored in Cloudflare D1. Cloudflare processes connection data as our processor in order to serve the site and protect it from abuse.

Google LLC provides the Sign in with Google service. When you sign in, you deal with Google directly, under Google's own privacy policy; Google then sends us only what Google user data above describes.

The hosted Matter Manager service will name its own processors here before it accepts a single account. This page would rather be dull and current than impressive and wrong.

Last updated 9 October 2026. See also the terms of service and the imprint.