Privacy
What CTRL keeps.
In short: enough to run your account and show you your own history. Never your screen, your typing or your files.
Last updated 26 October 2026.
Never stored, never seen
What you see and do during a session (the screen, your mouse and keyboard, the files you send and anything you copy) goes from one of your devices to the other inside an encrypted connection that only those two devices can open. It doesn’t pass through CTRL’s servers in a form anyone else can read, and it isn’t recorded anywhere.
What we keep
| What | Why | For how long |
|---|---|---|
| Your email address and password (stored only as a secure hash) | To sign you in and send account emails | Until you delete your account |
| Each device’s name, type, model, system version and CTRL version, and when it was last online | To list your devices and show which are online | Until you remove the device or delete your account |
| Sessions and file transfers: which device connected to which, when, for how long, why it ended, and whether the connection was direct or relayed | Your History, and finding faults | 180 days |
| Security events, such as a device being linked or removed | So you can see what changed on your account | 180 days |
| Crash reports: the error message and where in CTRL’s code it happened, the CTRL and system version, and the screen you were on. Email addresses and ids are blanked out first | To find and fix bugs | 90 days |
| Your settings, including whether you want news emails | To remember your choices | Until you delete your account |
There are no adverts, no tracking scripts and no selling of data. This website sets no cookies. CTRL’s owner can see the account and device details above to support you and keep the service safe, but never the contents of a session.
Who handles it
- Supabase stores the account data and introduces your devices to each other.
- Cloudflare relays the encrypted connection when two networks are too strict to connect directly. It can’t read it.
- Resend sends CTRL’s emails: sign-in codes, password resets and, if you choose, news.
- Vercel hosts this website and the web app.
- GitHub hosts the downloads.
Your choices
- Turn news emails on or off in Settings, Account, or with the link at the bottom of any news email.
- Remove a device from Devices at any time. It stops being able to connect straight away.
- Delete your account and everything linked to it yourself: in the web app, open Settings, Account, Delete account, and confirm with your password. It happens straight away. The Windows and Android apps link there from Settings.
- To see a copy of your data, or if you can't sign in to delete your account, write to ctrl@chitemere.co.zw from the address you signed up with.
Questions
Write to ctrl@chitemere.co.zw.