Privacy policy
Last updated 20 September 2026
This policy covers a personal, single-household Home Assistant installation operated by James Miglietta. It is not a product, a service, or a business. It has one user, and no one else can sign in to it.
In short: nothing is collected from anyone. Data from my own smart home devices is read into software running on hardware in my own house, and it is not sent anywhere else, sold, shared, or analysed by any third party.
Why this page exists
Google requires a published privacy policy before an OAuth application can be moved out of testing mode, even when that application is a private installation used by its own author. This page satisfies that requirement and describes, accurately, what happens.
What data is accessed
Through the Google Smart Device Management API, and only with my own explicit authorisation of my own Google account, the installation reads:
- thermostat temperature, humidity and operating mode;
- device names, identifiers and connectivity status.
It is configured to read only. It does not change thermostat settings.
Where the data goes
Onto a server in my house, and nowhere else. It is stored locally so that temperature history can be graphed over time. There is no cloud account behind this installation, no analytics, no advertising, no third-party processor, and no transfer of the data to anyone.
This website
These pages are static. They set no cookies, run no analytics, and load nothing from third parties. Visiting them does not identify you. The host keeps ordinary web server logs, which I do not use.
Withdrawing access
Because the only authorised account is my own, the only person who can grant or revoke access is me. Access can be withdrawn at any time at Google Account permissions, which immediately ends the installation's ability to read anything.
Retention
Local history is kept for as long as it is useful and is deleted when the installation is reconfigured or retired. No copies exist elsewhere.