WardtermSSH client
EN
Download

Legal

Privacy policy

What personal data Wardterm uses and the rights you have over it.

Last updated Zedbros Communication SL

Who we are

Wardterm is provided by Zedbros Communication SL, Ronda President Irla 28, Oficina D30, 08302 Mataró (Barcelona), Spain, which is the controller of the personal data described in this policy. Its other details are in the Legal notice.

For anything about your data, write to privacy@wardterm.com. We have not appointed a data protection officer.

Data we process

Account

Needed to use the app: your email address, a name if you add one, your plan, its status and billing period, trial dates, whether two-factor sign-in is on and the secret that checks its codes. The server keeps a verifier of your vault password and its salt, and stores your keys only in encrypted form.

Sign in with Apple and Google

Optional. If you choose Sign in with Apple, Apple sends us your email address (or a private relay address, if you choose to hide yours), an identifier of your Apple account and, the first time only, the name you share. If you choose Sign in with Google, Google sends us your email address and an identifier of your Google account.

Devices

The name of each device you connect, whether it is a phone or a computer, the app and system versions, and the dates of sign-in and last activity. With an account, the app tells the server the version it runs once a day. On a Mac, iPhone or iPad, the app uses the Apple Push Notification service only to tell you that a new device asks to access your account. The server keeps a push token for each device and deletes it when the device signs out or you turn notifications off. The notice carries only the number of the request and a generic text.

Synced data

Encrypted items with random identifiers, revision numbers, sizes and dates. The server does not know what each item is.

Teams

Team name, members, invited email addresses, roles, seats and which member can open which vault.

Payments

On the website, Stripe collects your card and billing details. We receive a Stripe customer reference, your subscription and its status, and the invoices. When you buy in the App Store, Apple handles the payment and sends us a signed notice of the subscription and its status, without payment details.

Sign-in codes and protection against abuse

The email address a code is sent to, a one-way hash of the code and counters of failed attempts. Your IP address is also used while a request is handled, to limit abuse. When you ask for a code on the website, Cloudflare Turnstile checks that the request comes from a person. Cloudflare processes your IP address and technical signals of the browser, such as the user agent. Cloudflare processes the data of this check as described in its Turnstile Privacy Addendum.

Web server log

For the security of the website and of the service, our web server records each request with the IP address, the time, the page or address requested (without its query) and the result. This log is deleted after 30 days. An IP address that attacks the service is blocked automatically for up to 4 weeks, and stays on the list of blocked addresses for up to 5 weeks.

Content delivery and security

Requests to the website and to the sync service pass through the network of Cloudflare, which protects them against attacks and abuse and delivers the static files of the site from servers near you. Cloudflare processes the IP address, the request (the address of the page or service called, the method and headers such as the browser), the approximate location derived from the IP address, and technical and security logs. Vault data synced through the service is encrypted on your devices: Cloudflare passes it on without being able to read it. Cloudflare also gives us aggregate statistics of the traffic measured on its network (requests, countries, browsers), without scripts in our pages and without cookies.

Account activity

For the security of your account we record its sign-ins and failed attempts, two-factor sign-in, email codes, devices added and removed, changes to the password, email address and recovery kit, plan and payment events, and shared sessions. For each: the time, the IP address, the app and its version or the browser and system (such as "Chrome on macOS"), and the approximate country and city of the IP address. You can see your recent activity in the account area. The approximate place comes from a copy of the DB-IP Lite database kept on our own server (IP Geolocation by DB-IP, licensed CC BY 4.0).

Shared sessions

When you host or join a shared session, our server passes on the encrypted session without being able to read it. It keeps who hosted it, the accounts of guests who have one, the times and the amount of data, for 30 days.

Leaked-password check

Only when you start it in the app. For each password the app computes a one-way hash (SHA-1) and sends only its first 5 characters to the Pwned Passwords service of Have I Been Pwned. The comparison happens on your device and the result is not sent to us. That service sees your IP address.

Ask

Ask works on your device, with our AI model or with the command library included in the app: what you ask is not sent to us. If you turn the AI model on, the app downloads it once from our server, which sees your IP address. To check that your plan includes it, the app sends the token of your device, and the server records which account downloads the model, how many times and how much data, for 2 days.

Feedback and reviews

Only when you press Send in the app or in the account area: rating, type, message, an email address if you write one, your account if you are signed in, the app version, build, platform and system version. A review is published only with your consent and after approval, with the name you chose, the rating and the message.

Waiting list

If you join the waiting list for the apps: your email address, the platforms you chose, your language and the dates you joined and confirmed. We use them only to send you a confirmation email, one welcome email and one email when Wardterm is available for each platform you chose. You confirm with a link that we email you; without confirmation the address is deleted after 7 days. Every email has a link to leave the list with one click, and leaving deletes your data.

Messages

What you write to us and the address you write from.

Emails we send

Our server keeps a record of each email it sends, also to people without an account (waiting list, team invitations, sign-in codes): the address it was sent to, the type of email, the language, the subject, the time, whether it was delivered and, if not, why. The text of the email is not kept. It is used to answer questions about an email and to find delivery problems, and is deleted after 90 days. When an account is erased, its address stays in this record only masked.

App usage statistics

To know how many people use the app, it sends our server a small signal at most once a day, when it is opened or comes back to the front: the platform, the app version, the app language, whether an account is signed in and whether the plan is free or paid. It also sends a value that changes every day and the number of days since the previous signal, to count each install once per day and per period. The IP address is used only in memory to limit abuse and is not stored. The value of the day is kept for 35 days; then only daily totals remain, for 13 months. It starts only if you accept it in the app, and you can change your mind in Settings.

Crash reports

If the app hits an error or closes unexpectedly, it can send our server a crash report: the app version, the platform, the system version and the type of device (such as iPhone or Mac), the type of error, where in the code of the app it happened, and the names of the last few screens and actions. Before the report leaves the device, file paths, addresses, host and server names, email addresses, keys and anything typed in the terminal are removed from it. The IP address is used only in memory to limit abuse and is not stored. Reports are kept for 90 days. They are sent only if you accept them in the app, and you can change your mind in Settings.

Website statistics

For internal statistics, our server records the pages visited, the hour, the referring site, the campaign tags (utm_source and utm_campaign), the country, the language, the type of device and the system, without cookies and without storing the IP address. To count unique visitors it uses a code made from the IP address and the browser with a key that changes every day and is then discarded. The detail is deleted after 2 days; daily totals are kept for 13 months.

Our statistics script also measures: the page, the referring site and page (without its query), campaign tags (utm), the time on the page, how far it is scrolled, clicks on our main buttons and the waiting list sign-up, device type, system, browser, rounded screen size, and the country and region of the IP address, which is not stored. The pages of one visit are linked by a random number kept in the browser tab, and the wt_first cookie holds only the date of your first visit. While the page is visible it also sends a short signal once a minute, and one when its window goes behind another one or comes back: whether the page is in use is kept only in our server's memory, for 30 minutes, and only the time spent active, idle or in the background on each page is stored. The detail is kept for 14 days, then only daily totals, for 13 months. You can choose not to be counted in the Cookie notice.

Why we use it

  • To provide the service you signed up for: account, sign-in, sync, teams and support. Legal basis: the contract with you (Article 6(1)(b) GDPR).
  • To take payments and keep accounting and tax records. Legal basis: the contract and our legal obligations (Article 6(1)(b) and (c)).
  • To keep the service secure: limits on sign-in attempts, stopping abuse, the web server log, a log of your account's activity to spot and stop sign-ins that are not yours, and a record of the actions our staff take on an account. Legal basis: our legitimate interest in protecting the service and its users (Article 6(1)(f)).
  • To offer the free trial once per person, by remembering a one-way hash of the email address that used it. Legal basis: legitimate interest.
  • To send messages about the service: sign-in codes, invitations, payment and plan notices, and changes to our terms. Legal basis: the contract. The record of the emails sent, to check that they arrive and to answer questions about them: our legitimate interest (Article 6(1)(f)).
  • To tell you when the app reaches your platform, if you joined the waiting list (consent is given when you confirm your address; you can withdraw it with the link in every email or by writing to privacy@wardterm.com), and to publish your review, if you agreed. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time.
  • To answer your messages and feedback. Legal basis: legitimate interest, or the contract if you are a customer.
  • To see how the website is used, with our own statistics and the aggregate traffic statistics of Cloudflare. Legal basis: our legitimate interest in running the website (Article 6(1)(f)).
  • To count how many people use the app, with the anonymous daily signal described above, only if you accepted it in the app. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time in Settings.
  • To find and fix errors in the app, with the crash reports described above, only if you accepted them in the app. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time in Settings.

You need to give your email address to create an account, to buy a plan and to join the waiting list; everything else is optional.

We make no automated decisions that have legal or similar effects on you, and we do no profiling.

Cookies

The account area uses cookies that are needed to sign in, which need no consent. Cloudflare may set security cookies, which need no consent either. Our own statistics use one cookie with only the date of your first visit. The Cookie notice lists every cookie.

Who receives the data

  • Hetzner Online GmbH, Germany: hosts our servers, the database and our mail server, in data centres in Germany.
  • Cloudflare, Inc., United States: content delivery (CDN) and security for wardterm.com and its subdomains, including the account area, the sync service and the downloads of the apps. It processes IP addresses and requests as described above. On the account page it also provides the check that tells people apart from automated programs (Cloudflare Turnstile).
  • Stripe: processes payments made on the website.
  • Apple: processes purchases made in the App Store and, only if you choose Sign in with Apple, the sign-in, as an independent controller under its own terms. It also delivers the notices of new devices described above (Apple Push Notification service), receiving only the push token of the device and the notice.
  • Google: only if you choose Sign in with Google, as an independent controller under its own terms.
  • Have I Been Pwned (Pwned Passwords): only if you start the leaked-password check in the app. It receives the first 5 characters of a one-way hash of each password and your IP address.

Sign-in codes, invitations and other emails of the service are sent by our own mail server, run by Zedbros Communication SL on Hetzner servers in Germany. The Subprocessors page has the full list. We also disclose data when the law requires it.

Transfers outside the EU

Our server and database are in Germany. Stripe may process payment data in the United States and other countries; it relies on the EU-U.S. Data Privacy Framework and on the standard contractual clauses approved by the European Commission. Apple and Google transfer data under their own privacy policies. Cloudflare may process requests in the European Union, the United States and other countries where it operates. These transfers are covered by its Data Processing Addendum, which includes the standard contractual clauses, and by its certification under the EU-U.S. Data Privacy Framework. Cloudflare's privacy policy explains how it handles data.

How long we keep it

  • Account and synced data: while the account exists. When you delete your account it is locked at once and erased for good 30 days later. Until then you can ask us to restore it.
  • Accounts never used: an account created on the website that is never opened in the app and has no purchase is deleted about 7 months after it is created. We send an email 30 days before.
  • Backups: copies of the database, kept for 30 days. Our hosting provider also keeps a copy of the whole server for 7 days.
  • Devices: until you revoke them or delete the account.
  • Website sessions: 30 minutes. Sign-in codes: 15 minutes. Failed code counters: 24 hours.
  • Invoices and accounting records: 6 years from the end of the financial year.
  • Account activity: 90 days, then deleted automatically.
  • Web server log: 30 days. Blocked IP addresses: up to 5 weeks.
  • Shared sessions: 30 days.
  • Record of staff actions on an account: for as long as the service runs, also after the account is erased, for the security of the service and to be able to show how we handled personal data.
  • Trial record: a one-way hash of the email address, also after the account is deleted, for as long as we offer a free trial.
  • Feedback: 24 months. Deleting your account erases the text, the email address and the name of your feedback straight away, and withdraws any published review. Only the rating stays, linked to no one.
  • Waiting list: until you leave it, or until 30 days after we announce the last platform you chose, whichever comes first. Addresses that are not confirmed: 7 days. Copies can stay in the backups for up to 30 days more.
  • Messages to us: 24 months after the last message, unless we need them for a claim.
  • Record of sent emails: 90 days.
  • Website statistics on our server: the detail of page visits 2 days, that of our statistics script 14 days, daily totals 13 months.
  • App usage statistics: the value of the day 35 days, daily totals 13 months.
  • Crash reports: 90 days.

How we protect it

Vault data is encrypted on your devices before it is synced. Connections to our server use TLS.

Your rights

Under the GDPR you can ask for access to your data, correction, erasure, restriction of processing and a copy in a portable format, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting what was done before.

You can delete your account and change your email address yourself in the app or in the account area. For anything else, write to privacy@wardterm.com from the address of your account. We answer within one month; in complex cases we can extend this by two more months and will tell you why. It is free.

You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority of the country where you live or work.

Children

Wardterm is a tool for professionals and is not directed to children. You must be at least 18 years old, or the age of majority where you live, to create an account or buy a plan.

Changes to this policy

The date at the top shows the last change. If we change how we use personal data in a way that matters to you, we will tell account holders by email at least 30 days before the change applies.