Privacy policy
Effective from 19 October 2026
Controller
Enter sp. z o.o., ul. Dragana 16H/1, 80-807 Gdańsk, Poland, VAT ID PL5833177920. Data protection contact: [email protected].
This policy covers the Zdalna apps (macOS, Windows), the browser viewer, Zdalna accounts and the zdalna.space website. Other WinMac apps have their own policies.
What we cannot see
The screen picture, mouse movements, typed text, clipboard, chat and diagnostic results go directly between the computers over an encrypted channel. We also cannot access passwords saved in the address book (they are encrypted on your device).
Data we process
| Device | ID (9 digits), hash of the device key, computer name, operating system and app version, time of the last connection to the server |
|---|---|
| Account | email address, hash of the sign-in key (not the password itself), encrypted 2FA secret, trusted devices, active sign-ins |
| Address book | computer IDs, names, tags and notes; saved passwords only in encrypted form |
| Session history | who connected to whom (IDs and names), start, end and reason for ending |
| Security | IP addresses and app/browser at sign-in, account event log, invitation events |
| Abuse reports | report content, IDs of the reporter and the reported party, related session |
Purposes and legal bases
- Providing the service: connecting computers, account, address book, history (Art. 6(1)(b) GDPR).
- Security and abuse prevention: attempt limits, event log, handling reports (Art. 6(1)(f) GDPR, legitimate interest).
- Legal obligations, e.g. reporting incidents and vulnerabilities, payment accounting (Art. 6(1)(c) GDPR).
How long
| Session history | 12 months |
|---|---|
| IP addresses and account event log | 90 days |
| Abuse reports | 24 months |
| Account and address book | until the account is deleted |
| Device without an account | 12 months after the last connection |
Recipients (processors)
| Hetzner Online GmbH | servers in Helsinki (Finland) |
|---|---|
| Cloudflare, Inc. | proxies traffic to zdalna.space and winmac.app (protection and TLS encryption); transfers outside the EEA under the EU-US Data Privacy Framework and standard contractual clauses |
| Stripe Payments Europe Ltd. | payments, once paid plans are introduced |
| Google Ireland Ltd. | website font (Google Fonts) - your browser downloads it from Google servers |
| Email provider | being selected; we will update this list before we start sending email |
TURN relay traffic goes directly to our server, not through Cloudflare.
Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. We will delete your account or prepare a JSON export of your data on request by email, within 30 days. You may lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or with the authority in your country.
Browser storage
Zdalna pages use no tracking cookies and no analytics. We only store your chosen language in the browser and, in the browser viewer, the data it needs to work.