Privacy policy

02Information we collect

We collect only the information needed to operate accounts, subscriptions, security, support, and product reliability.

• Account data: email address, username, hashed password, workspace membership, and role.
• Billing records: plan, subscription state, invoices, and transaction references. Complete card numbers are handled by the payment provider and are not stored by GekkoLogin.
• Browser environment state: when environment sync is used, the cookies, local storage, and signed-in sessions inside a browser environment are uploaded as an encrypted archive. See “Environment state is encrypted before it reaches us” below.
• Environment configuration: the name, group, notes, and tags you give an environment, the hardware profile it is bound to, and the proxy you assign it. A proxy password is encrypted before storage.
• Network origin: the outbound IP address and country an environment last connected from, recorded so the interface can tell you when an environment's exit location has changed.
• Diagnostics: client version, login events, feature usage, crash context, and support messages needed to troubleshoot the service.
• Website enquiries: if you submit the newsletter or contact form, the email address you enter, your site language, and which page you submitted from.
• Activity ledger: an append-only record of significant actions in a workspace — who created, moved, deleted or restored an environment, and who changed roles or billing.

03Environment state is encrypted before it reaches us

The contents of a browser environment — its cookies, its local storage, the accounts signed in inside it — are the most sensitive thing this product touches, so they are encrypted on your own machine before they are uploaded.

Each installation generates its own key pair. The private key stays on that machine, held by the operating system's credential store, and is never sent to us. Our servers hold only the public key and the resulting ciphertext. There is no path in our systems that decrypts an environment archive, which means we cannot read the accounts inside your environments, and neither can anyone who obtains a copy of our storage.

The consequence is worth stating plainly: if you lose every device that holds your key, we cannot recover those environments for you.

04How we use information

We use information to provide and maintain the service, process subscriptions, secure accounts, prevent abuse, respond to support requests, and communicate important product or policy updates.

07Your choices and rights

You may request access, correction, deletion, or export of personal information by contacting [email protected]. We will respond within a reasonable period required by applicable law.

08Policy updates and contact

We may update this policy from time to time. Material changes will be communicated through the product, website, or email. Questions can be sent to [email protected].