Privacy

This page describes what actually happens, in the order you are likely to meet it. It is written by the people who built the site, from the site's own code. Where a promise would need a lawyer, we have made none.

This site is operated by Exprezoe.

Reading the site

No tracking cookie is set, and no script from anybody else is loaded. The site has no advertising, no analytics service and no embedded content from other sites.

The site counts how often each page is read per day, and which site a reader came from (the name of the site only, never the address of the page). These are counts: no cookie, no identifier, no network address and no details of your browser are kept with them. If your browser sends Global Privacy Control or Do Not Track, you are not counted at all.

The server in front of the site keeps an access log, as web servers do: the time, the address asked for, the network address it was asked from, and the browser's name. It is used to keep the site running and to look into abuse.

What the site keeps in your browser

Name	What it is for	How long
`pd-theme` (local storage)	Whether you chose dark or light. Never sent to the site.	Until you clear it
`pd-campaign`, `pd-referrer` (session storage)	Where you came from, if the address you arrived by said so. Sent only if you send the early-access form.	Until you close the tab
`__Host-pd-form` (cookie)	Protects forms against being sent by another site in your name.	The browser session
`__Host-pd-session` (cookie)	Keeps you signed in. Set only when you sign in.	At most twelve hours
`__Secure-pd-signin-…` (cookies)	Carries a staff sign-in to Exprezoe Identity and back.	A few minutes

All of them are necessary for something you asked for. None is used to follow you.

Asking for early access

The form keeps what you type into it: your name, your email address and, if you give them, your organisation, your role, the size of your team and what you wrote about your work. With them it keeps the time, that you agreed, and where you came from as described above.

It is read by people at Exprezoe in order to answer you. It is not passed to anybody else and not used for advertising. If you ticked the box, we may write to you when a new release is out, and you can tell us to stop at any time.

Holding a license

What is kept	Why
The licensee's name, email address and organisation	To know whose license it is.
A keyed hash of the license key	To recognise the key. The key itself is not kept.
For each installation: the computer's name, the platform, the version of PluggedDesk, a hash of a random identifier, and when it was activated and last seen	To count seats, and so that you can tell your installations apart.

"Last seen" is updated when an installation looks for an update, at most once an hour.

Signing in as Exprezoe staff

The site receives from Exprezoe Identity a stable identifier for your account, your name, your email address, and whether you belong to the groups that may use this site. It keeps the identifier and the name in your session, and with the installations you sign in on.

The audit trail

The site writes down each decision that matters: a sign-in, an activation, a download, a refusal, a change made by an administrator. A line holds the time, what was done, by whom (a license, a staff account), the network address and the browser's name. It never holds a license key, a password or a token.

Lines are deleted after 180 days.

PluggedDesk itself

PluggedDesk has no analytics and no usage tracking. It sends this site what is described in Licenses and seats and Updates, and nothing else:

never the names or addresses of the computers you connect to;
never a credential for them;
never what is on a screen, a keyboard or a clipboard.

Its diagnostics are kept on your computer.

Asking us

If you want to know what the site holds about you, or want it corrected or deleted, write to the person at Exprezoe you are in contact with. Deleting the record of a license ends the license.

When a public address for such requests exists, it will be stated here.