Privacy notice

1. What stays on your computer

Your screen, keyboard and mouse input, clipboard, transferred files, chat messages, voice calls and session recordings travel end-to-end encrypted (AES-256-GCM) between the two computers — directly whenever the network allows it, otherwise through our relay server. We cannot see or store their content. Passwords for unattended access are never sent. Saved connections, SSH servers, private keys and settings stay on your computer.

2. What the relay server receives

• Your 9-digit computer ID and a one-way fingerprint of the secret that owns it, the computer name shown in the app, and when the ID was last online. IDs not used for 180 days are deleted.
• A machine identifier: a one-way fingerprint of your Windows MachineGuid (or Linux machine-id), so licenses and the free daily limit can be counted per PC.
• Your IP address, to connect the two computers and to stop abuse (rate limits, the free daily limit).
• Session times for the free-use limits and for security; free-use counters reset every day.
• Your license key, if you entered one, and which PCs use it (their machine identifiers and names).
• To find a direct path between two computers the app asks a public STUN server (Google) for your public IP address.

3. License shop and account

• Email address, name, country and optional company and VAT number: to send your license key, sign-in links and invoices, and for your account.
• Your account password, if you set one: stored only as a one-way scrypt hash, never in readable form. We cannot see it; if you forget it, you set a new one with an emailed link.
• Order details: plan, number of PCs, price, dates, PayPal order, payment and subscription numbers.
• Payments are handled by PayPal. We never see your card or bank details.
• Cookies: only essential ones — one keeps you signed in to your account (30 days), and one remembers your order for 6 hours after you start paying, so you can create your account password on the thank-you page, and one remembers a referral link you opened (30 days). No tracking, advertising or analytics cookies.

4. Legal bases

To provide the service and the license you asked for (contract); to prevent abuse and keep the service secure (legitimate interest); to keep accounting records (legal obligation).

5. Who processes it for us

OVHcloud (servers for the relay, the license service, the websites and email), PayPal (payments), Google (STUN only). We share data with authorities only when the law requires it.

6. How long we keep it

Computer IDs: 180 days after last use. Free-use counters: the same day. Licenses and orders: while the license is active and then as long as accounting law requires (up to 10 years for invoices). Server logs: up to 30 days. Sign-in links: 30 minutes; account confirmation links: 24 hours. Accounts: until you ask us to delete them.

7. Your rights

You can ask for a copy of your data, correction, deletion (except what we must keep by law), restriction, objection and portability by writing to contact@qubitpage.com. You can also complain to the data protection authority of the country where you live.

8. Children

Licenses and accounts are not meant for children under 16.