WinDisplay updates

Privacy

This covers WinDisplay’s download site (windisplaydownload.gufinov.com) and update service (windisplayupdates.gufinov.com).

What is stored

For each computer connected for updates: the computer name WinDisplay shows, the WinDisplay version, a random installation id made by WinDisplay, the email address of the person who approved it, when it was connected and when it last checked for updates. The computer’s update key is stored only as a one-way hash.

A connection request also keeps the country it came from (as Cloudflare reports it), which is shown to the person asked to approve it. A connection code and its request are deleted a day after the code expires.

To limit abuse the service counts requests per network (an IPv4 address, or the first half of an IPv6 address) in 10-minute windows, and limits how many connection requests one network (and one larger IPv6 block) can have waiting. Installer downloads are also counted per connected computer and per person. It stores networks and people in these counts only as a keyed hash; the key is random and replaced every day, so the address cannot be worked out from it afterwards. The counts are deleted after 20 minutes.

A removed computer can no longer check for updates. Its record (name, version, installation id, approver email and times) is deleted 30 days after it was removed.

What is not collected

No pictures, videos, settings, monitor details or usage data leave your PC through this service. There is no advertising and no tracking, and nothing is sold or shared.

Signing in

The download site uses Cloudflare Access: you sign in with a one-time code sent to your email address. Cloudflare keeps its own sign-in records.

Who processes it

The service runs on Cloudflare. WinDisplay releases are kept in a private GitHub repository.

Removing your data

Remove a computer on the download site under Your connected computers; its record is deleted 30 days later. To have everything about you deleted at once, ask the person who invited you to the beta: they can delete it on the download site.