Last updated: November 2026
1. Scope
This Privacy Policy applies to the MQTT One website (mqtt.one) and the MQTT One cloud broker services. MQTT One accounts and services are now unified with the iotBind platform: account registration, login and account management take place on iotBind and are also covered by the iotBind privacy policy.
2. Information collected on this website
This website is informational and does not require an account. When you visit it:
- Our web server records standard technical data such as IP address, browser type, requested pages and time of the request, for security and operation purposes.
- We use a privacy-focused analytics service to understand how many people visit our pages and which content is useful. This data is used in aggregate form only.
- If you contact us by email, we receive your email address and the content of your message.
3. Information processed by the broker
To provide the MQTT broker service, we process:
- Connection data — broker username, client ID, IP address, connection times and protocol details.
- Message data — the topics and payloads your devices publish. Messages are delivered to authorized subscribers; retained messages and queued messages for persistent sessions are stored until they are replaced, delivered or expire.
- Configuration data — broker credentials, topics and access rules associated with your project.
You decide what your devices send. Please avoid publishing sensitive personal data unless it is necessary and encrypted.
4. How we use information
- To operate, maintain and secure the broker and the website.
- To authenticate clients and enforce topic access rules.
- To diagnose problems, prevent abuse and protect our users.
- To answer your questions and provide support.
- To improve our services using aggregated, non-identifying statistics.
We do not sell your personal information and we do not use your message content for advertising.
7. Security
We use technical and organizational measures to protect information, including per-user credentials, topic access control and encrypted connections (TLS and secure WebSocket). No system is completely secure, so we recommend using encrypted connections, unique credentials for each device and keeping your passwords private.
8. Data retention
We keep information only as long as necessary to provide the service, meet legal obligations and resolve disputes. Server logs are kept for a limited period for security and troubleshooting. Broker data linked to a project is removed when the project or account is deleted, except where we are required to keep it.
9. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can manage most account data directly on iotBind. For any other request, contact us at support@mqtt.one. Deleting your data may mean we can no longer provide the service to you.
10. Children
Our services are not directed to children under 13, and we do not knowingly collect personal information from them.
11. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed. Significant changes will be announced on this website.
12. Contact
Questions about this policy? Email us at info@mqtt.one or support@mqtt.one.