Security & privacy
What is collected
What the service holds, and what it never sees.
Held by the service
| Data | Why |
|---|---|
| Your email and a hash of your password | To sign you in |
| Computer names and identities | To list and recognise them |
| Online state and last seen | To show what you can reach |
| Session start, end, length | The Connections log |
| Path, delay, loss, data used | So you can tell a bad network from a bad setting |
| Account events | The Activity list |
| Billing details | Held by the payment company, not us |
Never collected
- What is on your screen.
- What you type.
- What you copy.
- Files, since there is no file transfer.
These are not policy choices that could quietly change. Session content is locked between your two computers, so it does not exist in readable form anywhere else.
Usage data
The apps and website report anonymous events, like launches and sign-ins. They carry nothing from inside a session.
How long
Account data lives as long as the account. Closing it in Settings deletes the account, its computers and its history. That cannot be undone.
Self-hosting
Run it yourself and all of the above stays on your own servers. The locking works the same either way.