Privacy policy

Who we are

Input Portal is made by Exevio Ltd. ("we", "us"). We are the data controller for the personal data described in this policy. You can reach us at support@inputportal.app. Our registered details are on the legal notice page.

Scope

This policy covers three things:

• This website at inputportal.app, including the download and contact pages.
• The Input Portal desktop app for Windows, macOS, and Linux.
• The optional Internet relay, which the app uses only when you turn on Internet fallback and a computer cannot be reached on the local network.

Download files are served from our download host and are covered by the same rules as this website.

No cookies and no tracking pixels

This website sets no cookies, stores no identifiers in your browser for tracking, embeds no third-party scripts, fonts, or pixels, and loads nothing from advertising or social networks. It keeps two values in your browser's local storage, and neither ever leaves your browser:

• ip-theme: the colour theme you chose, so the page does not flash on your next visit;
• ip-portal-discovered: whether you have found the portal line at the bottom of the page, so it stays visible afterwards.

Visitor statistics

To understand which pages are useful and where visitors come from, the website records usage data on our own server. It works without cookies, without a consent banner, and without any identifier stored on your device. For each page view we store:

• the time of the view (timestamp and calendar day, in UTC);
• the page path, without its query string, and the page title;
• the referrer host, the name of the site whose link brought you here, and never the rest of that address;
• the UTM source, medium, and campaign when the link you followed included them;
• a two-letter country code when our hosting provider adds one to the request (never a more precise location);
• your browser and its major version and your operating system and its coarse version, both derived from the User-Agent, and the device type (desktop, tablet, or phone);
• screen and viewport size, pixel ratio, language, and time zone;
• the theme you chose (light or dark);
• the navigation type: a full page load, or a move to another page within the site;
• a random per-view token, created in the page's memory for each view and never stored in your browser, used only to add the time on page to the right view;
• the time you spent on the page, measured until you leave it or switch to another tab;
• a pseudonymous visitor hash, and whether the view is the first one with that hash on that day (to count daily visitors).

The visitor hash is the first 16 characters of a SHA-256 hash of your IP address and User-Agent together with a random salt. A new salt is generated for each day (UTC) and deleted once that day is over, so afterwards nobody, including us, can recompute the hash, trace it back to your IP address, or link your visits across days. Your IP address itself is never written to the database. To stop abuse, the server also keeps short-lived request counters keyed by a hash of your IP address made with the same daily salt; they are deleted within two days.

Legal basis: our legitimate interest in operating, securing, and improving the website (Article 6(1)(f) GDPR and the UK GDPR). Because the data is not linked to you and no identifier is placed on your device, no consent is required.

Retention: page-view rows are deleted automatically 13 months after the view. Daily totals per page (views and visitors) contain no personal data and are kept.

Global Privacy Control: we honour the GPC signal in two places. When your browser reports it, our statistics script sends nothing, and when a request carries the Sec-GPC: 1 header, the server records nothing from it. We do not sell or share personal data in any case.

Contact form

When you use the contact form, we store what you type: your name, email address, and message, together with the time you sent it. Alongside it we store a hash of your IP address made with the daily salt described above, your browser's User-Agent string, and your browser's preferred language (from its Accept-Language header). The hash and the User-Agent help us prevent abuse and rate-limit repeated submissions; the language helps us reply.

• Purpose: answering your message and keeping a record of the conversation.
• Legal basis: taking steps at your request before entering a contract, and our legitimate interest in responding to enquiries and preventing abuse (Article 6(1)(b) and (f)).
• Processor: your message is emailed to us through Postmark (ActiveCampaign, LLC), which handles it on our behalf under a data processing agreement (see International transfers).
• Retention: messages are deleted from our server automatically 24 months after they were sent.

The desktop app

The app is designed so that we do not need, and do not receive, your data:

• No account. There is nothing to sign up for and no server enrolment.
• No telemetry. The app sends no usage data, crash reports, or analytics to us.
• Keys stay local. Each installation creates a device key stored in your operating system's per-user application data. Group membership and the list of approved computers live there too. The private key never leaves your computer; the relay sees only the public details listed below, and only when you turn on Internet fallback.
• Your content never reaches us. Keyboard and mouse input, clipboard content (text, HTML, RTF, and PNG images), screenshots, and remote preview video travel between your computers encrypted end to end: directly on your local network, or through the relay as ciphertext when Internet fallback is on. We cannot read them, and the app never writes clipboard or video content to disk.
• Local discovery. On your network the app announces its computer name over mDNS so your other computers can find it. This information stays on your local network.

The optional Internet relay

Internet fallback is off by default. When you turn it on for a group and a computer cannot be reached locally, the app connects to our relay. The relay forwards ciphertext only: the session between your computers is encrypted end to end with the Noise protocol, and the relay has no key to decrypt it. It never sees input, clipboard, or screen content, and only computers that were first approved on your local network can find each other through it.

To connect your computers and keep the service healthy, the relay can observe:

• the IP addresses of the connecting apps;
• device public keys, a group ID, and each device's declared list of group members;
• connection and session identifiers;
• the timing and direction of the traffic, and the sizes of the ciphertext it forwards;
• the unencrypted stream markers around that ciphertext (stream numbers and open, data, close, and flow-control markers).

Legal basis: performance of the service you asked for by enabling Internet fallback, and our legitimate interest in preventing abuse (Article 6(1)(b) and (f)). Retention: metadata is kept only as long as needed for operation, rate limiting, and abuse prevention, and short-lived logs are deleted automatically. It is not linked to any account, because there is none.

Your rights

Under the GDPR and the UK GDPR you have the right to:

• access the personal data we hold about you;
• rectification of inaccurate data;
• erasure ("right to be forgotten");
• restriction of processing;
• object to processing based on legitimate interest;
• data portability for data you provided to us;
• lodge a complaint with a supervisory authority, for example the data protection authority in the country where you live.

To exercise a right, email support@inputportal.app. Because the visitor statistics are pseudonymous and the desktop app holds no data about you on our side, in most cases the only personal data we can locate is a contact-form conversation, which we will find by your email address.

International transfers

The website and the relay run on servers operated by our hosting provider. Contact email is delivered by Postmark, which may process it in the United States. That transfer is covered by standard contractual clauses and the processor's data processing agreement.

Children

The website and the app are not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

We update this page when our practices change and update the "Last updated" date at the top. Meaningful changes will be announced on the website before they take effect. Earlier versions are available on request.

Contact

Controller

Exevio Ltd.

Email

support@inputportal.app

Legal notice

Company details and registered address