Privacy

Effective 9 October 2026. This page describes which personal data we process when you use the deskshare.zcloud.cz website, the DeskShare app and the web viewer, in line with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019.

1. Controller

Martin Zahálka, Havlíčkova 1550/54, 680 01 Boskovice, Czech Republic, company ID 07783809. Contact: martin@zcloud.cz. We have not appointed a data protection officer because we are not required to.

2. Data we process

The deskshare.zcloud.cz website

• The site is static and hosted on GitHub Pages. GitHub processes visitors' IP addresses and technical browser data with every request.
• The page loads the latest app version number from GitHub, which also sees your IP address.
• The site uses no cookies and no analytics or advertising tools. Fonts are served from the site itself, so nothing is sent to Google.

Connections through the signaling server app.deskshare.zcloud.cz

• Identifier of the shared computer (Server ID) and a random viewer identifier. They contain no name or other user details.
• IP address. We use it to limit the number of requests and to record failed sign-in attempts.
• Connection setup data. The IP addresses and ports both sides exchange to connect directly. The server only forwards them and does not store them.
• Connection times and sharing status, for example whether a computer is online.

We never store passkeys or passwords. The server only verifies the signed connection request.

Screen image and remote control

The screen image, mouse movements and key presses travel directly between the computers and are encrypted (DTLS and SRTP). The server cannot see them. If a direct connection is not possible, the encrypted data is relayed by Cloudflare (TURN relay). Cloudflare cannot see the content; it only processes IP addresses and the amount of data transferred.

The app on your computer

The app stores an identifier, an installation key, saved connections and operational logs on your computer. It does not send them anywhere. On start it checks GitHub for new versions, which lets GitHub see your IP address.

3. Purpose and legal basis

We process the data to connect the computers and run the service (performance of a contract, Art. 6(1)(b) GDPR). IP addresses and records of failed sign-ins are processed for security and abuse prevention (legitimate interest, Art. 6(1)(f) GDPR).

4. Retention

• Computer registrations, tokens and connection data exist only in the server's memory. They are deleted at most 15 minutes after disconnecting, or when the server restarts.
• Server operational logs are kept for at most 30 days.

5. Processors

• Microsoft Ireland Operations Ltd.: runs the signaling server (Microsoft Azure, West Europe data centre, the Netherlands).
• Cloudflare, Inc.: relays the encrypted connection (TURN) when a direct connection is not possible.
• GitHub, Inc.: hosts the website and distributes installers and updates.

We do not sell or share the data with other parties. Any transfer outside the EU/EEA by a processor happens only with appropriate safeguards (EU-U.S. Data Privacy Framework, standard contractual clauses).

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. Just write to martin@zcloud.cz. You can also lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz).