Privacy and cookies

What data we process and why

• Account: name, email, password (stored only as a hash), two-factor and passkey settings and your language. Purpose: creating and running your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Servers and monitoring: the server name and what the agent sends: CPU, memory and disk usage, the names and resource use of the busiest processes, service status and critical log entries. Purpose: providing monitoring and alerts. Legal basis: performance of a contract. Log entries may contain personal data; the agent only sends serious errors.
• Devices and security: IP address, browser and device type, last activity and a device identifier. Purpose: the list of signed-in devices, signing them out and protecting your account from abuse. Legal basis: legitimate interest in security (Art. 6(1)(f) GDPR).
• Alerts: your email address and, if you turn it on, a device registration for push notifications. Legal basis: performance of a contract; you also allow push notifications in your browser.
• Form protection: Cloudflare Turnstile checks that a visitor is human when signing in or registering. Legal basis: legitimate interest in protection from automated abuse.

Who receives the data

We do not sell data and do not use it for advertising or profiling. Only providers we need to run the service process it: the hosting provider, the email delivery provider (Brevo) and Cloudflare (Turnstile). If any of them processes data outside the EU/EEA, it happens under appropriate safeguards under Chapter V GDPR (an adequacy decision or standard contractual clauses).

How long we keep data

We keep account and server data while your account exists. When you delete a server or the account, the related data is removed. Revoked devices are removed from the list after 90 days.

Cookies

We need necessary cookies for the site to work and do not ask for consent for them. Preference cookies (remembering language and appearance) are stored long-term only with your consent. Without consent they last until you close the browser. We use no advertising or analytics cookies. Your choice is remembered in the browser storage (localStorage), not on the server.

Your rights

You have the right of access, rectification, erasure, restriction, portability and the right to object to processing based on legitimate interest. You can withdraw consent at any time; withdrawal does not affect processing before it. Use the contact above and we will answer within 30 days. You may also complain to a supervisory authority, in Slovakia the Office for Personal Data Protection (dataprotection.gov.sk), or the authority in your country.

Security

Traffic uses HTTPS, passwords are stored as hashes, you can protect sign-in with two-factor authentication or a passkey and you install the agent from a signed repository. Agent data is protected by a token that belongs to a single server.

Changes

We may update this document. The date of the last change is shown above. We will tell you about material changes.