# Oneway, every page in words > The words of every page on oneway.center, read on 2026-10-20 from the pages themselves (tools/site_seo.py). Oneway is a social network and a business platform in one: the Oneway App gives every person one profile, a For You feed, messages and a map of the people and places near them, and Oneway OS runs the businesses, communities and places behind them. It is in a closed beta, by invitation, in New York City and Long Island. Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## Oneway Source: https://oneway.center/ (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Oneway. We build & elevate experiences people want to return to. One profile for every person, a Center for every place, and Oneway OS to run it. Download App Explore Oneway OS Making entertainment, connection, and the Internet better for all sides. A modern ecosystem for people to easily and conveniently connect with cities, communities, and businesses. Oneway is a social network and a business platform in one: the Oneway App for people, with a For You feed, messages and a map of places, and Oneway OS for the businesses and communities around them, made by Oneway Technologies LLC in New York. Our mission Ecosystem We give every person one profile and every community or business a Center. Create your account Your corner of the internet, connected. Bring the best of the internet into one customizable place. Put your links, posts, activity, and social accounts together, making it easier to connect and network while choosing what you share and how you appear in every space. What a Center is These profiles and Centers are examples, until the beta's own arrive. Compatibility & Integration Bring the web together without leaving it behind. Connect the platforms and services you already use, bringing your online presence together while keeping the freedom to use the web your way. Bluesky Mastodon Instagram Facebook X Threads LinkedIn TikTok YouTube Pinterest Reddit Telegram Discord Google Business Profile Stripe Resend Firebase Cloud Messaging Apple Push Notification service Mozilla Push Service Windows Push Notification Services Google Calendar Apple OpenStreetMap Nominatim Overpass API Protomaps MapLibre Leaflet CesiumJS OSRM Google Maps Apple Maps GitHub Fly.io Google Fonts jsDelivr unpkg WordPress Wix Squarespace Webflow Weebly GoDaddy Website Builder Framer Carrd Duda HubSpot CMS Ghost Drupal Joomla! Google Sites Toast Oracle OPERA Cloud Oracle MICROS Simphony Shopify Wikipedia Wikimedia Commons National Weather Service NOAA Anthropic xAI Groq OpenAI Gemini Mistral AI DeepSeek OpenRouter Connections are built platform by platform. Availability depends on each service's supported capabilities and permissions. App Introducing Your fully customizable social network. See what your friends and the places you love are posting, and what is coming up at each of them. For You A feed ranked to what you like, a Following feed of only who you follow, and custom feeds you make from people, places and words, pinned as tabs on Home. Messages Messaging of its own: chats one to one and in groups that set their own rules, with friends and with places. Discovery A map of the people, places and Centers around you. A Center can start as an information page, checked by a person, and be followed before its owner claims it. Open the App The Oneway App OS A Center you make entirely your own. OS Brain iMac and iPhone are trademarks of Apple Inc., registered in the U.S. and other countries and regions. Oneway is not affiliated with Apple. A Center is a canvas: place its posts, events, links and website where you want them, and everyone who opens it sees it your way. Oneway OS is the AI business management side of the same social network, so the place people follow and the place you run are one. See how deep it goes. Connect your casino in one place. Go anywhere. Connect everywhere. Write it from your words, 09429b1a; bookings, events, the shop, customers, staff and roles, the inbox; the System Store; the Brain's web on Business OS). PROPOSED words, for his eye. --> Build your Center Make its page, its look and its own website, arranged as a canvas of Popits, from layouts made for your kind of place. Run it from one place Bookings and events, a shop, customers, staff and roles, and every message in one inbox. Grow it as you go Add Systems when you need them, connect the platforms you already use, and on Business OS see how all of it connects through the Brain. From managing online communities, developing custom tools, to running full businesses and zooming in on the operations of specific locations with the click of a button, within seconds. Open Oneway OS Oneway OS Reserve your name. Individual @you Organization .yourplace @ Reserve your @name @you Reserved Held for · — Reserve another name Plans and pricing. Every person and every Center starts free. App OS Business OS Developer OS + For people Coming soon The App's own private Brain Your own map Deeper recommendations More control over what it remembers Create your account OS For every Center Free A Center's public side Its community The tools to run it Create your Center Core For one Center's team The whole Brain on your Center: it notices, answers, drafts and recommends Assets, bookings, staff and customers on one record The Systems for your kind of place Lightbulb and the website creator, inside a monthly allowance You press the button on every act Contact us Business OS For one business Center $330 a month Everything in Core, plus The Brain can act for you, within the limits you set Helpers and plans that carry on by themselves A much larger thinking allowance Buy Business OS today Enterprise OS For organizations with several locations Several Centers under one organization One Brain that learns across every location A portfolio view, with a budget for each property Talk to us about Enterprise OS What a Center gets on each plan. What a Center gets OS Free Core By contact Business OS $330 a month Enterprise OS By inquiry The Center itself: a public page, community, posts, events, members and a website OS Included Core Included Business Included Enterprise Included The Brain knows your whole Center and answers from it, with its source OS Not included Core Included Business Included Enterprise Included It notices what needs you, and shows what an act would cause before you press it OS Not included Core Included Business Included Enterprise Included Smart replies: greetings, away messages and drafts from your live hours OS Not included Soon Core Included, soon Soon Business Included, soon Soon Enterprise Included, soon Assets, bookings and housekeeping on one record OS Not included Core Included Business Included Enterprise Included Hours, offers and availability kept true everywhere you are shown OS Not included Core Included Business Included Enterprise Included The Systems for your kind of place OS Not included Core Included Business Included Enterprise Included Staff, schedules and custom roles OS Not included Core Included Business Included Enterprise Included Lightbulb and the website creator, inside a monthly allowance OS Not included Core Included Business Included Enterprise Included Modules of its own OS Not included Core Included Business Included Enterprise Included The Brain acts for you, within the limits you set OS Not included Core Not included Business Included Enterprise Included Helpers and plans that carry on by themselves OS Not included Core Not included Business Included Enterprise Included A much larger thinking allowance OS Not included Core Not included Business Included Enterprise Included Several Centers under one organization OS Not included Core Not included Business Not included Enterprise Included One Brain across every location, with a budget for each OS Not included Core Not included Business Not included Enterprise Included Developer OS, for building applications, Systems and integrations on Oneway, is in closed beta. Invitation Only NYC Beta Our first launch is New York City. Closed Selective Server Beta Coming soon Contact Get Oneway OS today. Tell us what you run or what you want to build, and we set it up with you. We reply almost instantly to any business inquiry and adapt Oneway to any use case. Build this model of the internet with us. Buy Business OS today Talk to us about Enterprise OS Start on Developer OS Questions Oneway, in plain words. What is Oneway? Oneway is a social network and a business platform in one. Every person has one profile, and every community, place and business has a Center. Does Oneway have a feed like Instagram? Yes. Home has a For You feed ranked to what you like and a Following feed of only the people and places you follow, with photo and video posts and stories. You can also make custom feeds from people, places and words, newest first or top this week, pin them as tabs on Home, and share a public one for anyone to pin. You can also make custom feeds from people, places and words, newest first or top this week, pin them as tabs on Home, and share a public one for anyone to pin. How do people find places on Oneway? Through Discovery: a map and search of the people, places and Centers near you. A Center can start as an information page, its facts checked by a person, and its owner claims it when they join. What is a Center? A Center is the home of a place, a community or a business on Oneway. At its simplest it is an information page; it can also be a social profile, a website on its own domain, a storefront and the workspace its team runs it from. What is Oneway OS? Oneway OS is where a Center is run: its page and website, posts, events and community, free. Business OS adds bookings, staff and the Systems of its industry. Who controls my data? You do. Your profile shows only what you choose, your work for a Center stays apart from your personal activity, and you can delete your data and your account; if you own a Center, you hand it over first. Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## Oneway App Source: https://oneway.center/app (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Claim your @name App Go anywhere. Connect everywhere. Follow your friends, discover places you love, and bring your favorite parts of the internet together. Claim your @name Open the App Discovery Discover people, places, and communities. Your way. Explore Oneway through an interactive map or a personalized grid of posts. Find local businesses, events, and communities, follow the places you love, and see what is happening around you. Connect with other Oneway users passing the same local Centers, quietly, with Waypass. You control whether you take part. Create Info Centers to populate our ecosystem and win monthly rewards and ranking in your area. The Oneway App is a social app with a For You feed, a Following feed and custom feeds, stories, messages with group chats, and a map of the people and places near you, made by Oneway Technologies LLC in New York. Monthly rewards and eligibility rules are planned. Home For You, and you get to choose. Oneway is a customizable social media app for photos, videos, and posts. Explore a ranked For You feed, follow people and places, switch to Following, or create custom feeds that shape what you see. Import posts from supported connected platforms and arrange Popits on your in-app Home. iOS Home Screen widgets are planned, not available yet. Messages Messages, Your Way. Most messaging apps decide how your conversations work. Oneway lets you and your groups choose the rules. Choose privacy, membership, posting, and notifications. An admin can manage the chat, or members can vote by majority, two thirds, or unanimous agreement. Explore messaging controls Keep messages or set them to disappear Turn notices for detected screenshot shortcuts on or off Choose who can add or remove people, post, and change rules Open the group, approve requests, or invite people in Let new members see the chat history or start fresh Show or hide edit history and deleted message markers Turn read receipts, typing, reactions, replies, and forwarding on or off Allow photos and videos or keep the chat text only Set slow mode or leave it off Get every alert, mentions only, or mute the chat Accept or decline message requests from new people Set a group size limit (planned) Control message saving (planned) Screenshot notices apply to detected shortcuts. The web App cannot detect phone screenshots. Lightbulb Capture it. Import it. Make it yours. Capture photos, videos, and posts, bring in content from supported platforms, save it to your Workspace, and share it with friends and communities. My profile and workspace Your profile. Your work. Your choice. Your Oneway profile brings your identity, connections, and experiences together in one customizable space. Choose how it looks and what people can see. Workplace identity is optional. It keeps professional connections and activity separate from your personal life while you continue to use one Oneway account. Claim your name. Personal @name Organization .name @ Claim my @name @you Reserved Your name is reserved. It is held for your email while Oneway opens in stages. · — Open the App Oneway remembers the people and places you care about, and that memory is private by default. Your name. Your place on Oneway. Claim your @name, personalize your profile, and get ready to connect with the people, places, and communities that matter to you. Claim your @name Oneway OS for organizations Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. Claim your @name --- ## Our Mission Source: https://oneway.center/mission (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Mission Oneway aims to bring the web and local community together. Always building a place for individual expression, stronger communities and more connected workplaces, shaped by the people who use it. Privacy Your identity and data stay under your control. Choose what your profile shows and keep personal and workplace activity separate. Access to organizational work follows permissions, not a public profile. Oneway is made by Oneway Technologies LLC, a New York company: the Oneway App, a social network for people and the places they love, and Oneway OS, which runs the businesses and communities behind them. Privacy and security Oneway OS Building the best social media ecosystem for businesses and communities. A public Center is where people connect with a place. Oneway OS is where its team can manage that presence and organize the work behind it. Explore Oneway OS About Our Brand Built around experiences people want to return to. Oneway began with an interest in entertainment, hospitality, and the places that bring people together. What started as an idea for a modern arcade and social gathering space grew into a broader vision: connecting the experiences people enjoy in the physical world with the possibilities of the internet. That vision became Oneway Technologies, a company developing a connected ecosystem for people, communities, and businesses. One identity. Endless possibilities. The name Oneway reflects our belief that the internet should feel more connected without making every person, community, or business look and operate the same way. We bring different experiences together through one ecosystem while giving people the freedom to choose their own direction. A Profile A personal social space, a creative portfolio, or a place to bring together an online presence. A Center A neighborhood, an organization, a business, or an entire operation, as simple or as sophisticated as its purpose requires. Bluesky Mastodon Instagram Facebook X Threads LinkedIn TikTok YouTube Pinterest Reddit Telegram Discord Google Business Profile Stripe Resend Firebase Cloud Messaging Apple Push Notification service Mozilla Push Service Windows Push Notification Services Google Calendar Apple OpenStreetMap Nominatim Overpass API Protomaps MapLibre Leaflet CesiumJS OSRM Google Maps Apple Maps GitHub Fly.io Google Fonts jsDelivr unpkg WordPress Wix Squarespace Webflow Weebly GoDaddy Website Builder Framer Carrd Duda HubSpot CMS Ghost Drupal Joomla! Google Sites Toast Oracle OPERA Cloud Oracle MICROS Simphony Shopify Wikipedia Wikimedia Commons National Weather Service NOAA Anthropic xAI Groq OpenAI Gemini Mistral AI DeepSeek OpenRouter The goal isn’t to replace everything people already use. It’s to make the web easier to navigate, connect, and build upon. Technology that serves the experience. We approach technology from both sides: the people experiencing it and the people making those experiences possible. For individuals More control over identity, privacy, expression, and connection. For communities Accessible ways to organize, share information, and build a presence that reflects the people behind it. For businesses Their public presence, relationships, communications, and daily operations connected, without losing sight of the people they serve. Built to keep evolving. Oneway is an independent, founder-led technology company with ambitions beyond any single application, industry, or device, building a foundation that grows alongside the people and organizations using it. We’re starting by bringing social networking, local discovery, community management, and business operations into one connected ecosystem. Where Oneway goes next will be shaped by the people, places, and ideas that become part of it, and by the experiences we create both on and beyond the screen. From the spaces we connect to the destinations we bring to life, we’re building for a world where digital and physical experiences come together naturally. Created by William Rauert. Go anywhere. Connect everywhere. Explore the App Talk to us Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## Get Oneway OS today Source: https://oneway.center/contact (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Contact Get Oneway OS today. Write to us below for a business, a developer's project, a community or the App beta. Closed Selective Server Beta For businesses Business OS. Run your business, venue or community on Oneway OS: your Center and its website, bookings and reservations, customers, staff schedules, inventory and online sales, with the AI that works alongside your team. The rates are in the plans . For several locations as one organization, see Enterprise OS. Buy Business OS today For developers Developer OS. Build Systems and modules on Oneway's platform, from your own code or from a description in plain words, and offer them to the Centers that run on Oneway. Free for developers. Start on Developer OS For organizations Enterprise OS. Run several locations as one organization: one Brain across every Center, a view of the whole portfolio, and a budget for each property. Tell us what you run, how many locations and where, and which systems you use today. Talk to us about Enterprise OS For people The Oneway App. One profile for the places you go, opening by invitation in New York City first. Ask for an invitation Send an inquiry. Pressing send opens your email app with your inquiry written out, to send from your own address. Nothing leaves this page until you send it there. A business A developer Several locations A community The App beta Something else Your name Business, organization or project Where you are What you want to run or build Send inquiry Other ways to reach us. Support Press Partnerships Privacy and data deletion Oneway Technologies LLC, a New York limited liability company. Other services that use the name Oneway are not connected with us. williamrau78@gmail.com Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## Privacy Policy Source: https://oneway.center/privacy (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Privacy Policy This is the Privacy Policy for the Oneway ecosystem: the Oneway App, the Oneway OS, Sign in with Oneway on any site, oneway.center, and any other or future Oneway service. It is published by Oneway Technologies LLC, a New York limited liability company. Oneway is in closed beta. Last updated October 18, 2026. Contents Who decides what happens to your information What we collect How we use it Who can see what Recognition by places Connected accounts Businesses and their records Sensitive information Who we share it with How long we keep it Security Your choices Without an account Paying a Center Automatic checks Children Where it is handled Changes Who decides what happens to your information Your own account. Oneway decides, and this policy says how. A business's records about its customers , such as guest lists, bookings, rewards, and a casino's cage and compliance records. The business decides. Oneway stores and handles them for it. What we collect What Details Why Account Your email and password. The password is kept only as a one-way hash. If you turn on two-step sign-in, its secret is kept encrypted and its recovery codes as hashes. To sign you in and keep the account yours Profile Name, @handle, pronouns, bio, a location you type, website, links, picture, banner, and a birthday that stays private To show you as you choose What you post Posts, photos, videos, comments, reactions, saves, reposts, drafts and the feeds you build To publish what you make Messages Messages, files and reactions in chats, and the groups you are in To deliver them Places and plans Centers you join, follow, save or visit. Events you answer. Bookings: your name, email, party size, dates and notes. An application to a Center's job or class listing opens a conversation with that Center. If you message or book a Center without an account, we keep what you send for that Center: your words, the name you give and the way to reach you that you give, an email address or a phone number as you typed it. To run your plans Location Only if you turn sharing on. Never read from your device otherwise. To show where you are, to the people you choose Connected accounts The access another platform gives us, and the account's name and ID To post for you and show what is connected Notes and ratings Notes you add to other people's content, and your ratings of notes. An AI assessment of a note is stored next to the community's, never instead of it. To give content context Reports Reports and appeals you send us To review them What we record as you use it What Details Sessions When a session started and was last used, and the network address or browser it came from. You can see them and end them. Security log Sign-ins, refused sign-ins to your account, and password and two-step changes, with the network address What reached your screen Which posts you were shown, how many times and when last, so Home does not repeat itself How you watch Whether you watched a video to the end, watched it again, how long you stayed, or skipped it. It shapes the next posts in Home and fades within minutes to hours, but not for a person under 18, whose Home it does not shape. We do not label posts by topic or guess your interests from your words. Photos Hidden data inside a photo, such as GPS position, is removed before it is stored. Videos and GIFs are stored as uploaded, with whatever their phone wrote into them. We use a sign-in cookie and your browser's storage for settings such as theme. We use no advertising or analytics cookies and no analytics trackers, and we do not track you across other sites or apps, so there is no tracking to opt out of. Some pages in the App and OS load fonts and map code from Google Fonts and unpkg, which can see your network address. How we use it To run Oneway: sign you in, show your profile, deliver posts and messages, make bookings, and send the notifications you asked for. To keep accounts safe: limit sign-in attempts, require two-step sign-in in casino, guest, rewards and credential areas, and keep the security log. To rank Home from who and what you follow, the places you belong to, your reactions, what you have already seen and what you are watching now. None of this orders Home for a person under 18: their Home is the people and places they follow, newest first. To order For you in two moments. When you open it, the first posts come from what you follow and belong to, places near yours, and updates from city and community Centers near you, with other people's reactions counting for little. As you scroll, posts that more people reacted to come first. A feed you set to top this week is ordered by reactions alone. To favour posts from places near yours on Home. The places are the ones you belong to, follow, saved, visited or typed on your profile, and Oneway never reads your device's position for this. No more than one post in five comes from a nearby place you do not follow, and no author or place fills more than two of any ten. Following, and feeds you set to newest first, are not ranked. To fill the feeds you build from the kinds of Center you choose, such as restaurants or hotels. Only the kinds you pick are used, and nothing is inferred about you from them. To show friends what you share through StreetPass: Centers you both belong to and events you are both going to. To let places recognise you, if you allow it. To moderate. People decide reports. An automated check can move a report up or down the queue but cannot act on it. To write or suggest text and images when you use an AI feature. What you give that feature is sent to an AI provider to produce the answer. Oneway does not train AI models on your posts or messages, and each provider's own terms govern what it does with what it receives. To meet legal duties. We do not read your messages to rank posts or show ads. Moderators cannot open conversations. No decision about you is made by automated means alone: recognition only suggests and a person at a business confirms, and an automated check on a report can only change its place in the queue. Who can see what What Who Profile, posts, followers, who you follow Everyone, unless you turn on Private profile. Also yours to set: Show who follows you, Show who you follow, Anyone can comment, Anyone can tag you. Messages Only the people in the conversation. A message to a business goes to whoever it set up to receive it: its AI assistant, a person, several people or a team. The conversation says which. Activity and typing Others, until you turn Show when you are active and Show when you are typing off Events The number going is public. The list is the organiser's. A friend going to the same event sees that you are going too. Location Off until you turn it on. You choose who: nobody, up to 25 named people, followers, friends, people in your Centers, or everyone, including people not signed in. You choose how exact: exact or about 1 km. You choose how long: 1 to 24 hours, or only while you use the app. We keep only your latest position, and turning sharing off deletes it. Center pages A Center's public pages are published to search engines, maps and AI assistants. This never includes a person's private information. Search and suggestions People can find you by name and you can be suggested to people you may know, until you turn those off Recognition by places A business keeps a guest list: the hotel you stayed at, the restaurant you booked. Recognition lets it see that a record is you. A match is shown only when the record shares something you have proven: the email you sign in with, or a phone number or account you verified. A name alone never makes a match. A suggestion can appear when a record looks like your name, picture, bio and the words in your newest public posts. Posts for followers or friends only, deleted posts and a private profile's posts are never read. The picture check compares photographs. It notices the same photo used twice. It does not analyse your face. Which businesses: only ones you already have a tie to: their staff, their guests from the past year or with a stay coming up, people who posted there, and their followers. A person confirms. Someone at the business must confirm or reject a suggestion. A rejected one is remembered and not offered again. Once linked, the business sees whether you follow it, your role there, your bookings and posts there, and at a casino, that day's cash activity at the cage. We do not guess health, religion, ethnicity, sexuality, politics or finances from what you share. Setting Default What it says Let places recognise you On A place can match its guest list to you by your name, photo, bio and what you post publicly here, and someone there confirms it. Off means no place is shown that a record is you. Include accounts you connect Off Your X, Bluesky or Mastodon account can match you too. Off until you turn it on. Both are in Settings, under Privacy. Turn the first off and no business is shown a match or suggestion about you. We never tell a business that you exist and said no. Connected accounts Platform How it connects Instagram, Facebook, X, Threads, LinkedIn, TikTok, YouTube, Pinterest, Reddit, Google Business Profile Through the platform's own sign-in screen Mastodon You approve it on your server Bluesky Your handle and an app password, never your main password Telegram, Discord A bot token and channel, or a webhook address Before the platform's screen, Oneway lists each permission it asks for and why. You agree to each one. Connecting does not start until you have. What we keep is the access the platform gives us, and the account's name and ID. The access is encrypted with AES-256-GCM, with a separate key for each owner. It is never shown back to anyone. We post only what you pick to post. If you start an import, we read your posts on that platform and copy them onto Oneway as your posts, dated when you first posted them. Connecting your own account on your own profile marks it verified, so a place can match you by it only if you turned on Include accounts you connect. Connecting an account for a business proves nothing about you. Disconnect in Settings, under Connected accounts. We delete the stored access straight away, and the verified mark goes with it. You can also remove Oneway in the platform's own settings. Each platform's own policy covers what you post there. Businesses and their records A business on Oneway, called a Center, can keep records about its customers: name, email, phone, its own customer number, a rewards number, a picture, notes, and the customer's names on other platforms. It types them in or imports them from its own systems. The business is responsible for those records. To see, correct or delete one, ask the business. We help it answer. You do not need a Oneway account for a business to hold information about you. When a Center is created, Oneway gathers public information about the organization to propose a starting profile. Nothing is published until its operator confirms it. To correct or remove information about your organization, email us. A Center's Brain keeps a record of how people relate to the Center, built from what happened: follows, bookings, attendance, and posts there. It recommends, and a person at the Center decides. We do not infer health, religion, ethnicity, sexuality, politics or finances. A Center may also keep staff records, such as schedules and hours worked. A Center may also have its own website and its own privacy practices. This policy covers Oneway, not a Center's own site. Hotels and casinos may also keep stays, bills and deposits, rewards balances, cage transactions, limits you set on yourself, exclusion lists, and records the law requires. Your rewards standing moves between businesses only if you turn that on. The business receiving it sees your tier and which business it came from, never your balance, member number or play. When you book, message, join or follow a business, it sees that. Casino record Details Identification For reports the law requires, a casino collects name, address, date of birth, ID type, number and issuer, and taxpayer number where one exists. ID and taxpayer numbers are sealed, shown masked, and every opening is logged. Reports and cases Currency transaction reports and suspicious-activity cases. A suspicious-activity case is never disclosed to the person it concerns, so we cannot tell anyone whether one exists. Exclusions and limits Exclusion lists, and limits a person sets on themselves, which that person sees in the App Sensitive information Exact location is collected only if you turn sharing on and choose exact. Otherwise it is about 1 km, or not shared at all. Government ID and taxpayer numbers are collected by a casino for reports the law requires. They are sealed, shown masked, and every opening is logged. Messages are visible only to the people in the conversation. We do not infer health, religion, ethnicity, sexuality, politics or finances from what you share, and we do not use any of them to rank, recognise or target you. Who we share it with With What People you choose, and businesses you deal with As the sections above say Sites you sign in to with Oneway An ID that is different on every site and your public profile. Your email only if you tick Share my email. You can revoke a site in Settings. Platforms you connect What you post there and what you ask us to import Apps and integrations built by others Only what a Center has granted. A grant is per Center and can be revoked. AI providers What you give an AI feature, when you use one. The code can use xAI, Groq, OpenAI, Anthropic and fal (images). Resend Your email address and the message, to send account email Stripe, Twilio Only if a business turns on payments or texting OpenStreetMap Nominatim The words you search for and the map area, not who you are GitHub Hosts oneway.center and may log visits. Where the App itself is hosted will be named here before it opens to the public. Authorities When the law, a court order or a regulator requires it, or to protect someone's safety We do not sell your information and we do not share it for advertising, so there is nothing for a Global Privacy Control signal to opt you out of. If Oneway is merged or sold, we will tell you first. How long we keep it What How long Account Until you delete it. After that we keep your email address, the date you joined and the date you left, so no one else can register the address and inherit your history. Posts Deleting a post removes it from view. The record stays in our database. Messages A new conversation starts with messages that disappear after 2 days. The room's settings decide who can change that. When a message expires it is hidden, and its words, attachments and reactions are erased from our database the next time the conversation is opened. Attached files are not yet removed by this. Older conversations keep their messages until a timer is turned on. A business may be required to keep its conversations longer, and the conversation says so. Location Your latest shared position, until it expires or you turn sharing off Orders A paid order is kept as the Center’s record of a sale, for as long as the Center keeps its records; the Center decides, and you ask the Center to see or correct it. An order that was never paid is deleted after 7 days. What you send a Center without an account Kept for that Center, as one of its messages or bookings. The Center decides how long, and you ask the Center to see, correct or delete it. What reached your screen Kept until you delete your account, which removes it. We have not set an end date before then. We will set one and publish it here before the App opens to the public. The security log Kept after you delete your account too. We have not set an end date. We will set one and publish it here before the App opens to the public. Casino compliance records At least five years, as the law requires. They cannot be deleted on request. Backups We will state the backup period here before the App opens to the public. Legal holds We may keep records longer when the law, a regulator or a legal claim requires it, and only for as long as it does. Security Passwords are kept as bcrypt hashes and session tokens as SHA-256 hashes. The sign-in cookie cannot be read by scripts on a page and is sent only to our own site. These are encrypted with AES-256-GCM, with a separate key for each business and a master key kept outside the database: connected-account access, two-step secrets, and casino ID and taxpayer numbers. Sign-ins and changes to who can get in are written to a log built so that any later change to it can be detected. Other records, such as posts, profiles and bookings, are ordinary database records. We will state the hosting and disk encryption here before the App opens to the public. No system is perfectly secure. If a breach affects your private information, we will tell you and the authorities as New York and other state laws require. Report a security problem to williamrau78@gmail.com . Your choices You can How See what Oneway knows about you Settings, Understanding. For a full copy, email us. A copy covers your posts, comments, follows, memberships, profile, event answers and places. It does not yet include messages, bookings, location, connected accounts, what reached your screen, linked identities or the security log. Correct it Edit your profile any time. Remove linked identities in Settings. Delete your account Settings, Delete your account, with your password and your code if two-step is on. If you own a Center, hand it over first. Turn things off Recognition, matching by connected accounts, location sharing, being found by name, suggestions, each kind of notification, the weekly email, and your rewards standing moving between businesses Choose who can message you Friends, people from your Centers, people you have crossed paths with, or anyone. New people can wait in requests. What deleting your account does Removed Stays Every session. Your profile, picture and search listings. Your posts from view, and your reactions, reposts and saves. Your follows, blocks and mutes. Your Center memberships and your own space. Sites you signed in to with Oneway. Photos, videos and files you uploaded. What your Brain kept. The accounts you connected, with the access we held for them. Your linked identities. Your shared location. What reached your screen, and what the feed learned from it. Your list of bookings. Your notifications. Comments and messages you left in other people's conversations, shown as Deleted account. The minimal record described above. Records a business keeps about you, including its bookings. The security log. Records the law requires. Deleting your account removes the access we held for each connected account. It does not remove Oneway from each platform's own list of connected apps. Remove it there too, in the platform's settings. Your rights Depending on where you live, such as California, Colorado, Connecticut, Texas, Virginia, New Jersey and other states, you may have the right to know what we hold about you, to get a copy, to correct it, to delete it, to opt out of sale, sharing for advertising and profiling, and to appeal if we say no. We do not sell your information or share it for advertising, and you can turn recognition off at any time. To use a right, email williamrau78@gmail.com . We answer within 30 days, and may need to confirm it is you. You may ask someone to act for you; we will ask for proof they can. Using your rights will not change how we treat you. If we refuse, reply with the word Appeal and someone who did not make the first decision will review it and tell you the result in writing within 45 days. For Facebook and Instagram data, see Data Deletion . Without an account You can look around Oneway without signing in. We make no account and no record of you for it. A like or dislike you press is kept in your browser, on this device, and is not sent to us; when you sign in, it is sent once, as you. Nothing you do signed out becomes a page or appears in search. To comment, repost or save, you sign in. You can also message a Center from its page, book a table and pay a Center without an account; the sections above and below say what is kept when you do. Paying a Center When you buy from a Center through Oneway, you do not need an account. You pay on Stripe’s own page, to the Center’s Stripe account. Your card details go to Stripe and never to Oneway, and Stripe keeps your email address, billing address and shipping address. We keep the order: what it was for, how many, its amount, Oneway’s fee, the name Stripe was given, and whether Stripe says it is paid or refunded. If you were signed in, your account’s address is kept on the order too, so it is yours to find, and an event ticket answers you Going. A paid order is the Center’s record of a sale. Oneway’s fee is at most 1% of the sale, and it is refunded when the sale is refunded. Automatic checks Posts and comments are checked automatically for hate, threats and sexual words. A match is sent to a person at Oneway to review, with the words that matched; the check itself hides nothing. A message to a Center’s team from someone without an account is checked the same way, more strictly, and is not sent if it has any of those words or a link: the page says so, so it can be written again. Teens and children Oneway is for people 13 and older. When you sign up for the App we ask your birthday. It stays private, is never shown on your profile, and sets the protections for your age. When you sign up for a workspace, to join a Center’s team or to start a business, we ask only which age range you are in, never your birthday. A sign-up from someone younger than 13 is refused before anything about them is stored, and we do not knowingly collect information from anyone under 13. If you think a child under 13 has an account, email us and we will delete it. An account for someone 13 to 17 starts protected: The profile is private until they choose otherwise. Only people they follow can message them. Notifications are held from 10 PM to 7 AM in their own time zone, and from midnight to 6 AM Eastern whatever their time zone. Their Home is the people and places they follow, newest first. It is not ordered from what they react to, save or watch. After 60 minutes in a day the App says so once and goes on working; they can choose to keep going, and a weekly recap shows the days they did. They can invite a parent or guardian with an adult account to supervise. A parent can make the quiet hours longer and the day shorter, answers a young teen’s request to open their profile, and sees who they talk to by name and never what they say. Either of them can end it. From 13 to 15, their posts are not recommended to people who do not follow them, and their profile can be opened to everyone only with a parent’s approval. Where a state’s law asks for more for minors, that law applies. We have read New York’s SAFE for Kids Act and Child Data Protection Act, and we apply the strictest rule we have read to every account under 18, in every state, until we have read that state’s own law. Where it is handled Oneway is run from New York, United States. If you use it from another country, your information is handled in the United States and in the countries of the services named above. Changes When this policy changes, the date at the top changes with it. A material change is shown in the App before it takes effect, and we ask again where the law or a platform requires it. Contact Oneway Technologies LLC, a New York limited liability company williamrau78@gmail.com Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## Terms of Service Source: https://oneway.center/terms (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Terms of Service This is the Terms of Service for the Oneway ecosystem: the Oneway App, the Oneway OS, every Sign in with Oneway gateway, oneway.center, and any other or future Oneway service (together, the "Service"). They are an agreement between you and Oneway Technologies LLC, a New York limited liability company ("Oneway", "we"). By creating an account or using the Service you agree to these Terms. If you use Oneway for a business, a city or an organization, you agree for it too. Oneway is in closed beta. Last updated October 18, 2026. Contents Closed beta Who can use it Your account What you post Rules Reports and appeals Copyright Messages Connected accounts Centers and the OS Data processing for Centers Sign in with Oneway AI features Privacy Our rights Third-party services Plans and billing No warranty Limit of liability Your responsibility Ending Governing law and disputes Notices Changes The rest 1. Closed beta The Service is in closed beta, by invitation. It can change, break or be withdrawn. We may remove features and, where we have to, reset beta data, and we will tell you first where we can. Tell us what is wrong: any feedback you send may be used by us freely and without payment. 2. Who can use it You must be 13 or older. If you are under 18, or under the age of majority where you live, a parent or guardian must agree to these Terms with you. Accounts for people under 18 carry the protections the Privacy Policy describes. Some features, such as casino features, carry a higher legal age in some places, and you must meet it. You may not use the Service if you are barred from receiving it under United States law, including export and sanctions law. If you act for a Center, you confirm you have the authority to. 3. Your account Give accurate information. Keep your password and your two-step codes to yourself and tell us at once if someone else has them. You are responsible for what happens under your account. You may hold one personal account. You do not need an account to look around, to message or book a Center from its page, or to pay a Center; these Terms apply to you when you do. 4. What you post What you post is yours. You give Oneway a worldwide licence, free of charge, to host, store, copy, format and show it, to the people your settings allow, so that we can run the Service. The licence ends when you delete the content or your account, except for copies we are required to keep, backups until they are replaced, and content other people have already received, reposted or quoted. Posts, profiles and followers are public unless you change your settings. You choose your audience. You promise that you have the right to post what you post, and that it does not break the law or anyone's rights. Deleting a post removes it from view. The Privacy Policy says what we keep. 5. Rules Do not use Oneway to: break the law, or help anyone else break it; harass, threaten, stalk or target a person, or share someone's private information or location without their consent; post sexual content involving minors, or anything that exploits or endangers a child; post content that promotes violence or terrorism, or threatens to hurt someone; impersonate a person, a business or an organization, or pretend to be Oneway; send spam, run scams, or post fake reviews or manufactured engagement; upload malware, or attack the Service or get around its limits, security or sign-in; scrape the Service, or copy data from it, without our written permission; use recognition, the guest list, location or StreetPass to identify, follow or pursue someone against their wishes; resell the Service, or build a competing product from it. If you find a security problem, tell us at the address below, give us a reasonable time to fix it, and do not read, change or keep other people's data to prove it. We will not take action against good-faith research that follows this. We may remove content, limit features, or suspend or end accounts that break these rules or put people at risk. Where we can, we say why. 6. Reports and appeals Anyone can report a post, comment, person or Center, including hateful conduct, from the App or the website. People review reports. Automated checks can raise or lower a report's priority but cannot act on it. We tell the person who reported what we decided. If we act on your content or account, you can appeal at the address below, and someone who did not make the first decision will look again. 7. Copyright If you believe something on Oneway infringes your copyright, email us the work, where it is on Oneway, your contact details, a statement that you believe in good faith the use is not allowed, and a statement, under penalty of perjury, that the notice is accurate and that you own or act for the owner. We remove infringing content and may end the accounts of people who repeatedly infringe. If we remove yours and you think we were wrong, you can send a counter-notice to the same address. 8. Messages Messages are between the people in the conversation. New conversations start with messages that disappear after 2 days, and the room's settings decide who can change that. A message to a business goes to whoever it set up to receive it, and the conversation says whether that is an AI assistant, a person or a team. Do not rely on a disappearing message to stay private: anyone who receives one can copy it. 9. Connected accounts You can connect accounts on other platforms. Before each connection, Oneway lists each permission it asks for and why, and you agree to each one. The platform's own terms and its own consent screen also apply. Oneway posts to a platform only what you pick to post. You are responsible for following each platform's rules for what you post there. A platform can end or limit a connection, and we are not responsible when it does. Disconnect any time in Settings. 10. Centers and the OS Every organization, business and city can have a Center. The people who run a Center manage it from the OS. The Center is its operators' responsibility: its content, its staff, its customers, its records and its compliance with the law. A Center keeps its own records about its customers. Oneway stores and handles them for the Center. The Center decides how they are used, must have a lawful basis to hold them, tell its customers about them, and answer their requests. Oneway is software. It is not a gaming operator, does not hold a gaming licence, and does not give legal, tax or compliance advice. A Center is responsible for the reports it files, the records it keeps and the rules that apply to it, including gaming, anti-money-laundering and privacy law. A Center must not use Oneway to contact, recognise, reward or admit a person it is required to exclude, such as someone on a self-exclusion list. A Center must treat a recognition suggestion as unconfirmed until a person at the Center has checked it, and must not use one to harass, discriminate against or pursue someone. If a Center sends email or text messages through Oneway, it is the sender. It must have the recipients' consent where the law requires it, honor opt-outs at once, and follow the CAN-SPAM Act and the Telephone Consumer Protection Act. Oneway does not provide facial recognition. A Center must not use Oneway to run face recognition on people, and must follow the law, including posting any notice it requires, for anything it does with its own tools. Two-step sign-in is required in casino, guest, rewards and credential areas. Do not share access. If you own a Center, hand it over before you delete your account. 11. Data processing for Centers For the records a Center keeps about its customers, staff and guests, the Center decides why and how they are used, and Oneway is its processor. As the processor, Oneway will: use those records only to provide the Service to the Center and on its instructions, which are the Center's settings and its use of the Service, and for no purpose of our own; keep them confidential, and let only people who need them to run the Service see them; protect them with reasonable administrative, technical and physical safeguards; use the service providers named in the Privacy Policy, hold each to the same duties, and name any new one in the Privacy Policy; help the Center answer a customer's or staff member's request to see, correct or delete a record; tell the Center without undue delay, and within 72 hours, if we learn of a breach that affects its records, so it can notify the people and the authorities the law requires; delete or return the records when the Center ends its use of the Service, within 30 days of its request, except where the law requires us to keep them; and give the Center, on request, the information it needs to show that we meet these duties. The Center must give its customers and staff the notices the law requires, and must not give us records it has no right to hold. 12. Sign in with Oneway This section applies to anyone who builds a site, app or integration on Oneway, including every Sign in with Oneway gateway and any app a Center installs. Ask only for what you need, and use only what the person or Center agreed to share. A grant is per person or per Center, and it can be revoked at any time. Stop using the data, and delete what you hold, when it is revoked. Do not sell the data, use it for advertising, use it to train AI models, or combine it with other data to identify people elsewhere. Publish a privacy policy that says what you collect from Oneway and why, and keep the data secure. Do not scrape, and do not reach Oneway data except through the access you were given. Tell us promptly if the data you received from Oneway is exposed. We may limit or disable an app that breaks these rules or puts people at risk. 13. AI features Some features use AI to write or suggest text and images. It can be wrong or unsuitable. Nothing is published for you without your choice. You are responsible for what you choose to post or send, for the accuracy of what you publish, and for following each platform's rules for it. Where an AI answers a message for a Center, the conversation says so. If you use AI to make an advertisement with an AI-generated person in it, you must disclose that as New York law requires. As between you and Oneway, you own what an AI feature produces for you, subject to these Terms and to the rights of anyone whose content it may resemble. Your Brain page is counted from your own activity and does not call an AI model. 14. Privacy The Privacy Policy says what we collect, how we use it and what you control. It is part of these Terms. 15. Our rights Oneway owns the Service: its software, design, name and marks. You may use it as these Terms allow and for no other purpose. You may not copy or reverse-engineer it except where the law lets you. 16. Third-party services The Service connects to services we do not run, such as the platforms you connect, maps, email and AI providers. Their terms govern your use of them. We do not control them and are not responsible for them. 17. Plans and billing Oneway is free for people, and Oneway OS is free for any Center. Business OS is $330 per month for one Center, and Oneway sets it up with you by contact; more than one Business Center is priced by agreement. Any other plan’s price is shown to you before you agree to it. No plan stops your work at a limit it does not show you. When a Center sells through Oneway, Oneway’s fee is at most 1% of the sale, and it is refunded when the sale is refunded. When you buy from a Center, you do not need an account; the Center is the seller and is responsible for what it sells. You pay on Stripe’s page, to the Center’s own Stripe account, and Stripe’s terms apply to the payment. Nothing is charged today. When billing opens, the price, the billing period, the renewal date and how to cancel are shown to you before you agree, and nothing is charged without your agreement. Paid plans renew each month until you cancel. You can cancel online at any time, and it takes effect at the end of the period you have paid for. We will tell you before the renewal if a plan renews for a year or longer. We give 30 days' notice before a price changes. Prices do not include taxes. Fees are not refunded, except where the law requires it. 18. No warranty THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. WE DO NOT PROMISE THAT IT WILL BE UNINTERRUPTED, ERROR-FREE OR SECURE, OR THAT CONTENT WILL NOT BE LOST. THIS IS A CLOSED BETA. 19. Limit of liability TO THE EXTENT THE LAW ALLOWS, Oneway'S TOTAL LIABILITY TO YOU FOR ANY CLAIM ABOUT THE SERVICE OR THESE TERMS IS LIMITED TO THE GREATER OF WHAT YOU PAID US IN THE 12 MONTHS BEFORE THE CLAIM AND $100. WE ARE NOT LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOST PROFITS OR DATA. NOTHING HERE LIMITS LIABILITY THAT THE LAW DOES NOT ALLOW US TO LIMIT. 20. Your responsibility You will defend and reimburse Oneway against claims, losses and reasonable legal costs that come from your content, your breach of these Terms or your breach of the law. If you use the Service for a Center, this also covers your Center's records and its operators' acts. 21. Ending You can stop using Oneway and delete your account at any time, in Settings. We may suspend or end your access if you break these Terms, if the law requires it, or if we close the Service. Sections that by their nature should continue, such as what you post, our rights, no warranty, the limit of liability, your responsibility and disputes, continue after that. 22. Governing law and disputes Law. New York law governs these Terms and any dispute about the Service, without regard to its conflict-of-laws rules, and the Federal Arbitration Act governs the arbitration clause below. Talk first. Write to us at the address below and give us 30 days to put it right before you start a claim. Arbitration. If we cannot resolve it, any claim between you and Oneway goes to binding arbitration run by the American Arbitration Association under its rules for consumers or for businesses, whichever applies. It is decided by one arbitrator, on an individual basis, and the arbitrator can give the same relief a court could. We pay the fees beyond what a court filing would cost you. Not covered. Either of us may bring a claim in small claims court, and either may go to court to stop misuse of intellectual property or of the Service. No class actions. Claims are brought only on your own behalf, not as a plaintiff or class member in a class or representative action. Your choice. You can opt out of arbitration and the class waiver by emailing us within 30 days of first accepting these Terms, saying that you opt out. Then the courts of the State of New York, and the federal courts located there, hear the dispute, and you and we consent to them. 23. Notices We may notify you in the App, by email to the address on your account, or on this page. You may notify us at the address below. You agree to receive notices electronically. 24. Changes We may change these Terms. We will show a material change in the App at least 14 days before it takes effect, and ask again where the law or a platform requires it. If you keep using the Service after that date, you accept the change. If you do not accept it, delete your account. 25. The rest These Terms and the Privacy Policy are the whole agreement between you and Oneway about the Service. If a part cannot be enforced, the rest still applies. If we do not enforce a part right away, we have not given it up. Neither of us is responsible for a delay caused by something beyond its control. No one else has rights under these Terms. You may not transfer your account or these Terms. We may transfer ours if Oneway is merged or sold. Contact Oneway Technologies LLC, a New York limited liability company williamrau78@gmail.com Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## Data Deletion Source: https://oneway.center/data-deletion (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Data Deletion How to delete what is yours on Oneway, from one post to your whole account: what goes at once, what is kept, for how long, and why. The Privacy Policy is the full account of what we hold. Contents A post or a photo A comment A connected account A copy of your data Your whole account What is kept, and why For Meta, Threads, Instagram and Facebook On your profile A post or a photo Open the post in the Oneway App Press Delete , then Delete for good? It leaves your profile, every feed and every Center it was posted to at once, with its photos and videos. A photo goes with the post it is in. The files themselves are erased when you delete your account. Under a post A comment Open the post and find your comment Press Delete beside it It leaves the conversation at once, and the post's count goes down. Instagram, Facebook, Threads, X and the others A connected account In the Oneway App, open Settings , then Connected accounts Press Disconnect beside the account, then press it again The access the platform gave Oneway is deleted straight away, and nothing more is sent there. Where connecting it verified that account on your profile, the verified mark goes with it. An account connected for a Center you run is disconnected the same way, in Oneway OS under Settings , then Connected accounts . Posts already sent stay on the platform, where you can delete them. Posts you imported from it stay on Oneway as your posts, and you delete each one like any other post. The platform keeps Oneway in its own list of connected apps until you remove it there too. Before you delete anything A copy of your data In the Oneway App, Settings , then What Oneway knows about you , shows what Oneway understands about you. For a full copy, email williamrau78@gmail.com from the address on your account. We answer within 30 days, and may need to confirm it is you. Everything at once Your whole account In the Oneway App, open Settings , then Delete your account Enter your password, and the code from your authenticator app if two-step is on Press Delete your account , then Tap again to delete it for good If you own a Center, hand it over to someone in Oneway OS first; you are told which one. Your own space is not a Center you run, and it goes with your account. What goes at once: every session, on every device. Your profile, picture and search listings. Your posts from view, and your reactions, reposts and saves. Your follows, blocks and mutes. Your Center memberships and your own space. Sites you signed in to with Oneway. Photos, videos and files you uploaded. What your Brain kept. The accounts you connected on your profile, with the access we held for them. Your linked identities. Your shared location and your Footsteps. What reached your screen, and what the feed learned from it. Your list of bookings. Your notifications. It cannot be undone, and nobody can sign in to it again. If you cannot sign in, email us from the address on the account. After you delete What is kept, and why What How long, and why Your email address, the day you joined and the day you left Kept, with no end date, so no one else can register the address and inherit your history. Comments and messages you left in other people's conversations They stay, shown as Deleted account with no picture, because they are part of other people's conversations. A post or a comment you deleted Gone from view at once. Its record stays in our database, so a reply or a share that pointed at it can say it was removed. What a Center keeps Its own records, its bookings, the pictures uploaded for it and the accounts connected for it stay with the Center: they are its records, not your profile's. The security log Kept after you delete your account, because it is the record of sign-ins and changes to who can get in. We have not set an end date. We will set one and publish it in the Privacy Policy before the App opens to the public. Casino compliance records At least five years, as the law requires. They cannot be deleted on request. Backups We will state the backup period in the Privacy Policy before the App opens to the public. Legal holds Longer only when the law, a regulator or a legal claim requires it, and only for as long as it does. We made this page for Meta, Threads, Instagram and Facebook. Hello! What Oneway receives from Facebook When you connect a Facebook Page The access Facebook gives Oneway: a key for your Facebook account and one for each Page you chose. They are kept encrypted and are never shown back to anyone. Each Page's name and ID, and, for the Page Oneway posts to, the ID of the Instagram professional account linked to it, if it has one. Instagram comes through the same Facebook sign-in. If you start an import: the Page's posts, with their photos and videos, copied onto Oneway as posts. Oneway uses it to send the posts you pick to that Page and its Instagram account, and to copy the Page's posts when you start an import. It never receives your Facebook password, and it does not ask Facebook for your friends or your messages. Threads connects through its own sign-in and gives Oneway its own key, with your Threads account's ID and username. On Facebook Remove Oneway from your Facebook account On Facebook, open Settings & privacy , then Settings Open Apps and websites ( facebook.com/settings?tab=applications ) Find Oneway Services and press Remove Facebook ends the access it gave Oneway: Oneway can no longer post to your Pages or read them. What Oneway already received stays with Oneway until you delete it, below. On Oneway Delete what Oneway received from Facebook In the Oneway App, open Settings , then Connected accounts . For a Center, open Oneway OS, then Settings , then Connected accounts Press Disconnect beside Facebook, then press it again. Do the same beside Instagram Oneway deletes the access it held for them straight away, with each Page's name and ID, and nothing more is sent to them. Posts you imported from Facebook are Oneway posts: delete each one like any other post. Deleting your Oneway account deletes the Facebook and Instagram connections on your profile too. Or email williamrau78@gmail.com from the address on your Oneway account with the name of the Facebook Page, and we delete what Oneway received from Facebook for it. We answer within 30 days, and may need to confirm it is you. Contact To have anything else removed, email us. We answer within 30 days. williamrau78@gmail.com Oneway Technologies LLC Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## What Oneway's words mean Source: https://oneway.center/learn (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Learn What Oneway's words mean. Oneway has its own words for its parts. Here is what each one means, as the platform is built today. Oneway is in its Closed Selective Server Beta. Profile A Profile is a person's one identity on Oneway, with an @name, the same in the App and in Oneway OS. You choose how it looks and what it shows, and you can make it private. Explore the App Guest A guest is anyone using Oneway without an account; in the App, “Look around first” starts as one. A guest can explore the map and Discovery, and like a post, which is kept on their device and counts once they sign in. Where a Center lets anyone ask, a guest can ask it a question and get its answer by email, or leave a phone number for the Center to call back. Commenting, reposting and saving need an account. Without an account Center A Center is what a place, a community or a business is on Oneway: one object with two sides. Its public side is what anyone sees in the App, and its operating side is Oneway OS, where its team runs it. Founding a Center makes both sides at once. What a Center is Canvas A canvas is a page its owner arranges. Every Center is one: its team places Popits on it in Oneway OS, moves and sizes them, and a visitor sees it as it was laid out, in fewer columns on a phone. Your Home in the App is a canvas of your own. Popit A Popit is one live piece of a canvas, drawn from one thing its owner keeps: its latest posts, what is coming up, its links or its website. When that thing changes, every Popit that shows it changes with it. Popits in Oneway OS Systems Systems are the tools a kind of place runs on, such as a hotel's operations, a restaurant's floor or a community's membership, added to a Center from the System Store. Each one works from the same Center, and which ones a Center can add depends on its OS. The System Store Oneway OS Oneway OS is the operating side of a Center, where its team builds and runs it. Its base layer is free: the Center's page and identity, its posts, events, announcements, groups, Popits and community. Business OS is built on top of it, and so is Developer OS. Explore Oneway OS Business OS Business OS is what a business adds to its Center: a team with roles and departments, bookings, the Systems of its industry, the Brain, Cross Projection and Lightbulb LED. Explore Business OS Buy Business OS today Developer OS Developer OS is for building on Oneway: sites where people sign in with Oneway, Systems built on the same contract as Oneway's own, and integrations that report into a Center. It is free to start, and in closed beta. Explore Developer OS The Brain The Brain is a Center's understanding of itself, read from the Center's own records: what needs a person, what it knows apart from what it has only found, and the changes it recommends. It does something on its own only when the Center's owner allows it, and only what can be put back. It comes with Business OS. Compatibility and the Brain Cross Projection Cross Projection keeps one record of a Center behind every place it appears: the App, the Center's page and its own website. When a connected source shows something different, such as new hours, a person approves the change before the record moves, and everything that reads the record follows. It comes with Business OS. Compatibility and integration Lightbulb (Create) Lightbulb, labelled Create in the App, is where you make something: a post, a document, a note, a page to write or draw on, or a place for the map. What you make goes where it belongs, a post to a feed and a document to your Workspace. A Center's team makes things as the Center with Lightbulb LED, which comes with Business OS. Lightbulb in the App Discovery Discovery is where you find places, events, people and communities on Oneway, starting from a map. Signed out, it shows the places anyone can walk into; signed in, it starts from the Centers you follow and the communities you join. Discovery in the App Teen mode and parent supervision Teen mode is how the App runs for anyone 13 to 17: stricter from the first day about who can message them, who sees their posts and what reaches their phone at night. Supervision is a parent the teen invites, who can only make it stricter. Teen accounts Supervision Is a word missing, or unclear? Ask us Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## Community Guidelines Source: https://oneway.center/community-guidelines (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Guidelines Community Guidelines The rules for everyone on Oneway, what happens to an account or a Center that breaks them, and how to ask us to look at a decision again. They apply everywhere on Oneway: profiles, posts, comments, messages and Centers. They sit beside the Terms of Service . Updated 17 October 2026. Not allowed What is not allowed on Oneway. None of these, anywhere on Oneway, in public or in private. Harassment Do not harass, bully or stalk anyone, or keep contacting someone who has made it clear they do not want you to. Hate Do not attack or demean people for their race, ethnicity, national origin, religion, sex, gender identity, sexual orientation, disability or serious illness. Threats and violence Do not threaten to hurt anyone, push someone to hurt themselves, or promote violence or terrorism. Sexual content involving minors Never post, share or ask for sexual content involving anyone under 18, or anything that sexualizes a child, exploits one or puts one in danger. There are no exceptions. Intimate images without consent Do not share, or threaten to share, a nude or sexual image or video of someone without their consent, including one that is faked or edited to look real. Impersonation Do not pretend to be another person, a business, an organization or Oneway. Spam and scams Do not spam people, phish for their passwords or money, or run a scam. Do not fake reviews, or buy followers, likes or comments. Illegal goods and services Do not sell, buy, trade or arrange anything illegal, such as illegal drugs, stolen goods, or weapons sold outside the law. Private information Do not share someone's private information without their consent: their home address, phone number, documents or where they are. Do not use a place's guest list, location sharing or StreetPass to find or follow someone. What happens What Oneway does when a rule is broken. A person decides every report. A machine can raise a report for a person to look at, but it never decides one. Reports However often one person reports the same thing, it counts once. How to report someone, or block or mute them, is on Safety . The word check A post written in the App is checked for hateful, threatening and sexual words, some disguised spellings included. What it finds waits for a person, and the check hides nothing by itself. A Center's own space A Center's team can remove comments left on its posts, and you can remove comments left on posts on your own profile. A complaint about a Center is decided by Oneway, never by that Center. Community notes Where readers have added context to a post, it shows under the post, and anyone signed in, other than its writer, can rate it helpful or not helpful. How it shows comes from those ratings, and no note is ever labelled as verified. Removal Oneway can take a Center that breaks these rules out of search, the map and everywhere else it is shown, its posts with it. Restricting an account Oneway can restrict an account that breaks these rules, for a set time or until it is lifted. Every session it has ends at once, it cannot sign in, and the person is told the reason when they try. Appeals Ask for a decision to be looked at again. If you think a decision about you is wrong, you can appeal it. How to appeal Write to us from the contact page : which decision it was, and why you think it is wrong. Who can appeal Only the person a decision was about, never the person who made the report. What follows When an appeal overturns a decision, a restriction that rested on it is lifted and the person is told. Every decision is recorded with who made it. Look out for each other. Safety on Oneway Terms of Service Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## Safety Source: https://oneway.center/safety (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Safety Safety on Oneway The controls you have, the protections teen accounts start with, how a parent can supervise, and how to reach us when something is wrong. The rules everyone keeps to, and what happens when someone does not, are in the Community Guidelines . How the platform itself is protected is on Security . Updated 17 October 2026. Block, mute, report Stop anyone reaching you. On a person's profile, press More beside Follow and Message. In a chat with one person, open Chat settings, then Privacy and safety. Block They can no longer message you, mention you or see your posts. Follows between you end, what they already sent leaves your notifications, and they are not told. Undo it in Settings, under Blocked accounts; follows do not come back on their own. Mute Their posts stop reaching your feed, and nothing else changes; they are not told. To undo it, find them in Settings, under Muted accounts. Report Choose what is wrong: spam, harassment, hate, violence, nudity, self harm, misinformation, impersonation, intellectual property, illegal, or other. Nobody is told who reported it. Anything else To report a post, a comment, a message or a Center, tell us through the contact page and say where it is on Oneway. Teen accounts Teen accounts start protected. Oneway asks your birthday when you join the App, and your age decides which of these apply. No one under 13 can join. Private to start A teen's profile starts private. Messages Only people a teen follows can message them, whatever their other settings say. Bedtime Between 10 PM and 7 AM their time, no push notification goes to their phone; what comes in waits in their list in the App. No more than three push notifications are sent in a day. Daily limit After 60 minutes in a day, the App says so and offers to keep going. It never cuts them off. Their time each day and over the week is in Settings, under Supervision. 13 to 15 Oneway does not suggest their posts to strangers, and a parent must approve before their profile is open to everyone. Not in search No one under 18 is listed in Google or any other search engine. Your birthday It is never shown to anyone else. How it is kept, and the rest of what applies to someone under 18, is in the Privacy Policy . Supervision A parent can supervise. Only the teen can start it, and it ends on its own when they turn 18. Starting it The teen invites a parent in Settings, under For families, Supervision. The parent needs a Oneway account of their own, with a birthday showing they are 18 or over, and has 7 days to accept. A teen can have two parents supervising. Limits, only stricter A parent can make bedtime longer and the day shorter, never the other way: bedtime can start as early as 6 PM and end as late as 10 AM, and a day can be as short as 15 minutes. Approvals A teen's ask to open their profile goes to the parent, who decides, and the teen is told either way. What a parent sees The protections in force, what the teen has asked for, and who the teen talks to, by name. Never what they say, never a group's name, and never the teen's birthday. Ending it Either of them can end it at any time, and the other is told. When no parent is left, the stricter limits end with it. Privacy Choose who sees you and who reaches you. Each one is in the App's Settings: look under Privacy, or under Messages. Private profile Only friends, people you follow who follow you back, see what you post. Who can message you Friends, people from your Centers and people you have crossed paths with each have a switch, and Anyone stays off until you choose it. Unless you change it, a first message from someone new waits in Message requests. Comments Let anyone comment, or only friends and people from your Centers. Search engines Keep your profile and public posts out of Google and other search engines. A link someone shares still opens. Online and typing Hide when you are online, and when you are typing. Lists and counts Hide who follows you and who you follow. Hide the counts of reactions and replies on your posts, or on everything you see. Location Share where you are with nobody, people you name, followers, friends, your Centers or everyone, exactly or approximately. Turning it off deletes it. Let places recognise you Turn it off and no place is offered a match with you. How a match is made, and what a place sees once you are linked, is in the Privacy Policy . Images and child safety Intimate images and child safety. If an intimate image is shared without consent, or anything sexualizes a child, report it as soon as you see it. Do not share it further, and do not send it to us. In the App Open the profile of whoever shared it, press More, then Report, and choose nudity or illegal. Anywhere else Use the contact page and give a link to where it is, or the account's name. If someone threatens you If someone says they will share an image of you unless you pay or send more, you do not have to do either. Report them first, then block them. Help outside Oneway NCMEC's CyberTipline takes reports of child sexual exploitation. Take It Down helps with images taken before you were 18, and StopNCII.org helps adults. They are run by others, not by Oneway, and work with the platforms that take part in them. If someone is in danger now, call 911. If you are thinking about hurting yourself, call or text 988 in the United States. Your data Delete what is yours. Delete a post from the post itself, or your whole account in Settings, under Delete your account. What goes at once and what stays, with the reasons, is on the Data Deletion page. Data Deletion Something wrong? Tell us. Contact Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## Support Source: https://oneway.center/support (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Support Help with Oneway. Short answers, each one pointing to the page that says more. Questions Common questions. How do I sign in? While the Closed Selective Server Beta runs in New York City, Sign in on oneway.center opens the beta page. There a business can ask to start on Oneway OS, and anyone else can ask for an invitation to the App. The beta How do I get Business OS? Ask for it from the contact page, and we set it up together. Business OS I am a developer. How do I start? Tell us what you plan to build, from the developer part of the contact page. Developer OS How do I delete my data or my account? The Data Deletion page walks through each way to remove what is yours, from one post to your whole account, and says what stays. Data Deletion What does Oneway do with my information? What we collect, why we use it and who can see it are all set out in the Privacy Policy. Privacy Policy How do I block or report someone? The Safety page shows where Block, Mute and Report are in the App, and what each one does. Safety What is allowed on Oneway? The Community Guidelines hold the rules, and our Terms are the agreement under them. Community Guidelines Terms of Service Something on Oneway does not work for me. The Accessibility page lists what works today, the gaps we know of, and how to tell us about a barrier. Accessibility Who makes Oneway? Oneway Technologies LLC makes Oneway, and Our Mission says why. Our Mission Contact Still need help? Write to us. Send an inquiry Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## Accessibility Source: https://oneway.center/accessibility (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Accessibility Oneway should work for everyone who uses it. We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at level AA, on this site and in the App. It is an aim we are working toward, not a certification. Today What the site and the App do now. Keyboard Every link, button and field on this site shows a ring when you reach it with the keyboard. The App draws its own ring on its controls, from the dock to the rows of Settings. Motion When your device asks for reduced motion, this site's sky holds still and its sections appear without rising into place. The App stops moving too: on its Home screen, every animation stops. The App also has its own switch, in Settings, then Accessibility. Reduce motion turns off the App's animations without changing what you can do, on every device you sign in on. Contrast We measure contrast on the rendered page, not only in the code. On Our Mission, Support, this page and the legal pages, every word stands at least 4.8 to 1 against what is behind it, in light and in dark, where level AA asks for 4.5 to 1. In the App, Higher contrast makes its quieter words and its edges stronger. Text size No page on this site or in the App turns off zooming, so you can enlarge any of it with your browser or a pinch. In the App, Larger text enlarges what you read. Pictures Every picture on this site has a text alternative, or is marked as decoration so a screen reader passes over it. Not yet Where we know we fall short. Descriptions for your photos You cannot yet write a description for a photo you post. Until you can, a screen reader hears each one by its place in the post, such as Photo 1. Some small marks A few small marks on the landing and the OS page, such as the initials in sample profile pictures and the faint arrows between steps, measure below the contrast level AA asks for. Arranging a Center's canvas In Oneway OS, a Center's Popits are moved and sized by holding and dragging them. There is no keyboard way to arrange them yet. An outside audit Everything here comes from our own checks. No outside auditor has tested Oneway against WCAG 2.2. Report a barrier Tell us what stopped you. On the contact page, name the page or screen, what you were trying to do, and what you use to get around, such as a screen reader, a keyboard or zoom, so we can fix it. Report a barrier This page was last reviewed on 17 October 2026. Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway. --- ## Security Source: https://oneway.center/security (last changed 2026-10-20) Our Mission App OS Security Contact Sign in Security One standard for the whole ecosystem. The same protections cover every part of Oneway: a person's account, profile and messages in the Oneway App; a community's or a business's Center; the operating side of every Center in Oneway OS, Business OS and Developer OS; every System a Center runs, from a restaurant's floor and a hotel's rooms to a venue, a shop and a casino resort; every website a Center wears; and every integration and app built on the platform. A neighborhood group and a casino's operating floor sit on the same platform, so they are held to the same bar: the one set by the most regulated industry we serve. What this page is. Oneway is in closed beta and is not yet running as a public service. This page describes the security controls built into the platform today, each exactly as it is implemented. Nothing here claims a certification we do not hold. For how we handle personal information, read the Privacy Policy ; for blocking, reporting and the protections teen accounts start with, read Safety . Identity and sessions Passwords are hashed with bcrypt at a work factor of 12, each with its own salt. A password is never stored, logged or returned in plain text. Two-step verification uses time-based one-time passwords (TOTP, RFC 6238) from any standard authenticator app. Codes are verified in constant time, and recovery codes are stored only as hashes. We do not offer codes by text message, because SIM swapping defeats them. Two-step is available on every account and required where the stakes are highest: the whole operating side of a casino's Center asks for it by default. Sessions are held on our servers and referenced by a random token in a __Host- cookie marked Secure, HttpOnly and SameSite=Lax. No session token is ever stored where a script can read it, and signing out ends the session on the server, not only in the browser. Changing a password ends every other session on the account at once. Signing in reveals no account. A signed-out sign-in or password reset answers the same whether or not an address has an account. Rate limits on every endpoint , applied per session and per network address, so one person's traffic never spends another's allowance. Over the limit, a request is answered with 429 and a Retry-After, and nothing behind the endpoint runs. Between people and between Centers Authority comes from the relationship, never from the request. What a person may see or do is decided by their real standing with a Center (owner, admin, staff or member) and by what each person has chosen to share, never by an identifier the caller supplies. One Center can never reach another's operating side. An automated test reads every Center endpoint from the application's own route list and calls each one as the owner of a different Center. A new endpoint is tested the day it is added. Every change requires a signed-in person. An automated test calls every endpoint that changes anything while signed out; none succeeds, except the few a signed-out person needs, such as signing in and resetting a password. Roles each Center defines for itself. Beyond owner, admin and staff, a Center can name its own roles. A role can only narrow what a member of staff may see and do, and every role change is written to the security log. Encryption and secrets Every Center has its own secrets vault. Credentials a Center uses to connect its own systems are encrypted with AES-256-GCM under a data key belonging to that Center alone. Envelope encryption. Each Center's data key is itself encrypted under a master key that is never stored in the database. Every ciphertext is bound to its place. Each one is authenticated with its Center and its name as associated data (AEAD). A value copied to another Center, or renamed, fails to decrypt, and any altered byte fails the authentication tag. Secrets are write-only. No endpoint returns a secret, not even to its owner. Operators see a secret's name, who set it, when, and when an integration last used it. The value reaches only the server code that calls that provider. Keys are 256-bit values from the operating system's cryptographically secure random generator, with a fresh nonce for every encryption. Key rotation without exposure. Rotating the master key re-wraps each Center's data key. No secret is decrypted to do it. Crypto-shredding. Removing a Center's vault destroys its data key, and from that moment the platform can no longer open any secret it held. Encrypted database backups made before the removal still hold the old key until they age out, within 14 days. Personal secrets, such as a two-step seed, are sealed under a key derived for that one purpose and bound to the person they belong to. In transit: HTTPS everywhere, with HTTP Strict Transport Security for one year across every subdomain. Integrations and apps A business connects its own systems. A provider cannot sign itself in to a Center. Each Center sets up its own integrations, with credentials only it holds, kept in its own vault. Every feed has its own key, shown once when it is issued and stored only as a SHA-256 hash. Issuing a new key disables the old one immediately. Signed webhooks. Messages from a connected vendor are verified by their HMAC-SHA256 signature in constant time before anything is read, and a signed message is refused once it is too old to be fresh. Apps built on Oneway run on their own sandbox host, under their own content security policy. Outbound requests Server-side request forgery, where a server is tricked into fetching an address that points inward, is how a vendor's server becomes a way into its customers' networks. Every request an integration makes goes through one guarded fetcher: HTTPS only, to the hosts each integration is allowed to reach. Publicly routable addresses only. Private, loopback, link-local, carrier-grade NAT and reserved networks, cloud metadata endpoints, and their IPv6 and IPv4-mapped forms are all refused. The name is resolved once, and the connection is made to exactly the address that was checked, so DNS rebinding cannot redirect a request after it is checked. TLS is verified against the host name, and every redirect is checked again from the start. Every request is bounded in size and time, and no proxy is taken from the environment. In the browser X-Content-Type-Options: nosniff : a response is never read as a type other than the one it declares. frame-ancestors 'self' : no other site can frame Oneway's pages for clickjacking. Referrer-Policy: strict-origin-when-cross-origin : no path or query string leaks to another site. A Permissions-Policy that allows location, the camera and the microphone only to Oneway's own pages, each only when the person allows it, and shuts Bluetooth, USB, serial ports, HID devices and payment. Cross-Origin-Opener-Policy: same-origin , and Cross-Origin-Resource-Policy: same-site on data, so another site cannot embed Oneway's data. Files and photos A file is identified by its bytes (its magic number), never by its name or its declared type. Anything unrecognized is refused. Sizes are capped before anything is decoded. Photos are stored without where they were taken or by what. GPS position, device and capture metadata are removed before storage, without altering a pixel, and the orientation is kept. Content-addressed storage. Every file is stored under its owner and a SHA-256 digest of its contents. An upload cannot choose its path, climb out of its folder or overwrite anyone else's file. Accountability and disclosure A tamper-evident security log records sign-ins, refused sign-ins, changes to how an account is protected, and changes to roles and access. Each entry is chained to the one before it with an HMAC, so an altered or removed entry shows exactly where. It never records a password, a code, a token or a credential's value. Dependencies are pinned to exact versions with cryptographic hashes, on a supported runtime. Vulnerability reports are welcome at the contact in security.txt (RFC 9116). We read every report. The standard we hold ourselves to The bar named at the top of this page, the one the most regulated industry we serve sets for its vendors, is OWASP ASVS Level 3 for every endpoint, mapped to a recognized control framework (CIS Controls, ISO/IEC 27001 or NIST SP 800-53), and GLI-GSF-3, the gaming industry's information security audit for vendors. A SOC 2 Type II report and independent penetration testing are part of that program. This page will say when each is complete, and never before. Our Mission App OS Business OS Developer OS Security Contact Support Safety Community Guidelines Accessibility Glossary Oneway Arcade Privacy Terms Data Deletion Corporate Charter 2027, Oneway Technologies LLC Oneway, the Oneway App and Oneway OS are made only by Oneway Technologies LLC, of New York. We are not affiliated with oneway.tools, with the Oneway retail and self-checkout software at tryoneway.com, with the One Way services app, or with any other product that uses the name Oneway.