Privacy

This console reads tenant metadata, device counts, and cloud-node telemetry. It does not decrypt or inspect VPN traffic — circuit contents are opaque to the backend by design.

Session tokens are never handed to your browser. They are held server-side and referenced by HttpOnly cookies that page scripts cannot read, and they are cleared on sign-out or when a refresh is rejected.