1. Controller
Lightnet Multimedia GmbH, 3376 Graben, Switzerland. Email: info@windesk.ch.
2. Scope
This privacy policy applies to the website windesk.ch, the customer portal app.windesk.ch and the WinDesk desktop applications (client and host). It also covers data processing that takes place within support and contractual relationships.
3. What data we process
Website visit: IP address (anonymised), browser type, referrer, timestamp. Stored in server logs for a maximum of 7 days.
Analytics: We use Plausible (cookie-less, EU-hosted) and Google Analytics 4 with IP anonymisation and Consent Mode v2 (default denied for advertising cookies).
Account usage: Email, hashed password (bcrypt), subscription tier, usage statistics (number of sessions, duration, host IDs).
Payment data: Via Stripe. We do not store credit card data, only transaction IDs and invoice data.
Remote sessions: Metadata (time, duration, client/host IDs, file hashes). Session content is shielded from us by end-to-end encryption.
Download click tracking: When you click a download button, we log the click with platform, version, language locale and country (GeoIP). The IP address is truncated to the /24 subnet when the click is logged; a full IP address is never stored, so individual persons cannot be identified. This data is used exclusively for market analysis and is not shared.
Technical usage statistics (app): The WinDesk client and host apps send technical, non-personal usage data so we can improve the product: platform (Windows/macOS/Linux), OS version, app version, language, screen resolution and monitor count, session kind and duration, and country (derived from the IP address locally on our server, with no disclosure to third parties; database: IP Geolocation by DB-IP — the IP itself is not stored). A pseudonymous hashed device value is used to count unique installations. No content (no screenshots, keystrokes, filenames), no real names and no account IDs are collected. These statistics are active for free and anonymous use; paying customers can disable them in the app settings. Legal basis: legitimate interest in product improvement.
Debug submission: Only when you actively choose “Send debug logs” in the app do we transmit the app's technical log files together with an optional context text you write, to our support. This transmission never happens automatically. Please do not include sensitive data in the context text.
4. Legal bases
Processing takes place on the basis of contract performance (Art. 31(2)(a) revFADP / Art. 6(1)(b) GDPR), legitimate interests (security, abuse prevention) and — where applicable — your consent.
5. Retention
Server logs (application): 7 days. Security logs (abuse defence, e.g. blocked addresses): 90 days. Session logs: 180 days. Download-click logs: the IP address is truncated to the /24 subnet on capture, a full IP is never stored; anonymised after 30 days. Technical app usage statistics: aggregated (one row per device per day), max. 180 days. Debug logs: until processed by support, then deleted. Invoice data: 10 years (Art. 958f of the Swiss Code of Obligations). Account data: until account deletion + 30-day grace period.
6. Disclosure to third parties
We disclose personal data only to data processors with whom we have signed data-processing agreements: Stripe (payments), Hetzner/Infomaniak (hosting), Plausible (analytics), Google (analytics, with Consent Mode). No sale to third parties.
7. Your rights
You have rights to access, rectification, erasure, restriction of processing, data portability and objection. Complaints may be filed with the Federal Data Protection and Information Commissioner (FDPIC). Requests to us: info@windesk.ch.
8. Security
Technical and organisational measures: TLS 1.3 for all connections, AES-256-GCM E2E encryption for sessions, role-based access control, multi-factor authentication for privileged accounts, regular security audits.
9. Referral programme
Referral link: When you open the referral link of a WinDesk customer, we set two strictly necessary cookies that are valid for 90 days: wd_ref (identifier of the referring customer, so that we can attribute your later registration) and wd_ref_v (random identifier of your visit, so that the same visit is counted only once). Both are read by app.windesk.ch only. For the visit we store this identifier as a hash and, where available, the country — no IP address.
Attribution and remuneration: If you register after clicking a referral link, we store which customer referred you. If you pay for a subscription, we calculate that customer's remuneration from it and store the amount, billing month and invoice number. The referring customer sees figures only and does not learn who you are.
Self-referral check: At your first payment we compare the payment method, billing address and e-mail domain with those of the referring customer. If they match, a member of staff reviews the attribution manually. We compare the payment method using an identifier provided by Stripe; we neither see nor store card numbers.
Taking part as a referrer: When you confirm the terms of participation, we store the time and version of your confirmation. For a payout we need your bank details, which are used for that transfer only. We keep attributions and remuneration for as long as statutory retention obligations for business records require.
10. Changes
We update this policy whenever our processing changes materially. The current version is always available at /en/privacy.