Privacy Policy

Effective date: June 1, 2026

1. Data we collect

Device data: on first launch, the app generates a unique Device ID (a 9-digit number) and a secure authentication token. This data is stored locally on the device and on our rendezvous server — solely to enable connectivity between devices.

Account (optional): if you create an account, we store your email address. Your password is stored as a hash (Argon2id) — we cannot recover it.

License: when activating a Pro license, we record the Device ID, a hardware fingerprint (a hash of CPU/motherboard/MAC), and the activation date.

Technical logs: our server keeps standard HTTP logs (IP, method, path, status, timestamp). Logs are retained for up to 30 days.

Session data: when you connect to another device, the server records that signaling took place (not its contents). The media stream (screen, input, files) never passes through the server.

2. How we use your data

• Device ID and tokens — to route incoming connections and authenticate
• Email — to send your license key and subscription expiry notices
• Hardware fingerprint — to discourage license sharing (a soft check, never blocking)
• Ad statistics (free tier) — an anonymous count of ad views

We do not sell, share, or trade your data with third parties for marketing purposes.

3. P2P connections and the media stream

Dragon Remote Desktop is built on the principle that "the server is never in the media path." This means:

• The contents of your screen, keystrokes, files, and chat messages never pass through our servers
• Connections are established via WebRTC — the standard protocol for P2P communication
• The entire media stream is encrypted with DTLS-SRTP between the two devices
• Even when a TURN relay is used (for difficult NAT setups), traffic remains encrypted — the server only ever sees encrypted bytes

4. Data storage

Data is stored on servers located in the EU. We apply technical and organizational measures to protect it from unauthorized access.

You can delete your account and all associated data by emailing support@dragondesktop.com. Your Device ID and token will be deactivated within 72 hours.

5. Third parties

Tribute (tribute.tg) — processes payments. During checkout, Tribute receives transaction information. Their privacy policy: tribute.tg/privacy

Resend (resend.com) — sends transactional email. Your email is shared with Resend only when an email needs to be sent (license delivery, notifications).

We do not use analytics trackers (Google Analytics, Yandex Metrica, or similar) on our website or in the app.

6. Your rights

You have the right to:

• Obtain a copy of the data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Withdraw consent to processing

To exercise these rights, contact: support@dragondesktop.com

7. Contact

For privacy-related questions: support@dragondesktop.com

We aim to respond within 5 business days.