Privacy policy

Controller and privacy contact

The controller responsible for Summondesk is Ioannis Kosmas (Blank Margin), c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany. Send privacy requests and other data-protection enquiries to support@madebyblankmargin.com.

What we store

Your account information, the names and platforms of the computers you add, and your plan and billing status are stored in Supabase. Email/password accounts use a hashed password. We do not store your screen content, keystrokes or session recordings. They travel end-to-end encrypted between your devices and are never readable by us.

Google and Apple sign-in

If you choose Google or Apple sign-in, the provider shares an account identifier, your email address and available basic profile information, such as your name or profile picture, with our authentication service in Supabase. We use this information to create or sign you in to your Summondesk account. Apple may provide a private relay address if you choose Hide My Email. We request only basic identity information, with no access to your email inbox, contacts or files.

Connection metadata

To set up a session, your browser and host exchange connection candidates (IP addresses and ports) through our signaling channel. These messages are relayed in real time and are not persisted. Sessions connect directly between your devices whenever the networks allow it.

Relayed connections

When no direct path between your devices exists, Pro and Lifetime sessions are relayed through a TURN relay operated by Cloudflare. The relay forwards the end-to-end encrypted stream and cannot read it; to do so it processes the IP addresses of both devices and the amount of data that passes through. Free sessions are never relayed.

Payments

Payments are processed by Stripe. Stripe collects your payment details on its own checkout page; we never see or store your card or bank details. We store your plan, the status of your subscription with its billing period and the date it renews or ends, and your Stripe customer and subscription IDs, so that we can unlock paid features, show your billing status and process cancellations. A reason you give when cancelling is stored with your subscription at Stripe.

Legal bases and essential storage

Where EU or UK data-protection law applies, we process your data to perform our contract with you (Art. 6(1)(b) GDPR), to meet payment, tax and other legal obligations (Art. 6(1)(c) GDPR) and, based on our legitimate interests, to operate, secure and support the service and to prevent abuse (Art. 6(1)(f) GDPR). Summondesk only uses the storage that sign-in and sessions need. It uses no advertising or analytics cookies.

Service providers

These providers process data only as needed to provide their services to us:

Vercel hosts the website. Supabase runs sign-in and the account database. Stripe handles checkout, subscriptions, invoices and payment status. Cloudflare relays paid sessions that cannot connect directly. Google and Apple, only if you choose to sign in with them.

Retention and deletion

We keep your account, your computers and your plan for as long as your account exists. Invoices and payment records are kept for as long as German tax and commercial law requires (up to ten years). The connection details exchanged to set up a session are not stored. To delete your account, email support@madebyblankmargin.com; we may need to verify the request.

International processing

Our providers may process data in the United States, the European Economic Area or other countries where they operate. Transfers outside the EEA rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

Your rights

You have the right to access, correct, delete, restrict and export your personal data and to object to its processing. To exercise these rights, email support@madebyblankmargin.com. You can also lodge a complaint with a data protection authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA).