Privacy policy

Controller

Sebastian Stadlbauer, Finklham 4612 Scharten, Austria, email: noreply@finklham.at

In short

The SnapRDP app

Profiles, recently used hosts and saved passwords stay on your Mac only. The app connects only to the computers and RD gateways you specify yourself and, in the directly downloaded version, to our license server (see below). In the App Store version, Apple handles the in-app purchase and Apple’s privacy policy applies.

Visiting this website

When you open the website, our server processes technically necessary data: IP address, time, requested address (without the Stripe session ID) and browser identifier. The website is operated by Elgendorfer Str. 57, 56410 Montabaur, Deutschland IONOS SE, acting as our processor. This data is processed only to deliver the page; we do not store access logs with IP addresses. Technical error logs contain no IP addresses and are rotated automatically. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Abuse protection: For rate limits and lockouts after repeated failed attempts, we store the IP address (for IPv6 only the /64 prefix) together with counters. These entries are deleted no later than 48 hours after the last request, active lockouts when they expire. Legal basis: Art. 6(1)(f) GDPR (protection against automated attacks).

Buying SnapRDP Pro

Payment is handled by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). Stripe collects name, email address, billing address and payment details and issues the invoice. Card details never reach our server. Stripe’s privacy policy also applies. For payments, Stripe may transfer data to the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses.

For the purchase we store: email address, Stripe session and payment ID, time and a hash of the license key. Purpose: performance of the contract, sending and recovering the key, deactivating it after a refund. Legal basis: Art. 6(1)(b) GDPR, for accounting records Art. 6(1)(c) GDPR in conjunction with § 132 Austrian Federal Fiscal Code (BAO). Retention: as long as the license can be used, accounting records at least 7 years from the end of the calendar year. A purchase is not possible without an email address and payment details.

We send the license key and the purchase confirmation by email via Self Hostet, acting as our processor.

Resending the key: If you enter your email address on the support page, we use it only to look up matching keys and send them to that address. To prevent abuse, we store a hash of the address for at most 48 hours. Legal basis: Art. 6(1)(b) and (f) GDPR.

License activation

When activating, the app sends the license key, a random device ID, the device name (e.g. “MacBook Pro”) and the app version to our server. We store the device ID only as a hash, along with device name, app version and time. Purpose: limiting use to the agreed number of Macs and preventing abuse. Legal basis: Art. 6(1)(b) GDPR. Retention: as long as the Mac is activated. Because the license is perpetual, there is no fixed expiry date: when you deactivate a Mac in the app, its entry is deleted immediately, and we will also delete it for you on request.

Withdrawal from the contract

If you withdraw using the withdrawal function, we process the details from the form (name, email address used for the purchase, optionally purchase date, invoice or order number and message) and the time of receipt. Purpose: handling the withdrawal, confirmation of receipt by email, refund and proof. Legal basis: Art. 6(1)(b) and (c) GDPR (legal obligation to confirm receipt). Retention: 7 years from receipt (accounting records under § 132 BAO); after that, the entries are deleted automatically. The IP address is used only for the abuse protection described above.

Backups

We back up the database with purchase, activation and withdrawal data daily, encrypted, on a separate server at IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Deutschland, acting as our processor. Purpose: recovery after an outage. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the availability of purchased licenses) and Art. 32 GDPR. Each backup is deleted after 30 days.

Contact by email

If you write to us, we process your message and contact details to answer your request (Art. 6(1)(b) GDPR for questions about a purchase, otherwise point (f)). We delete the correspondence once it is no longer needed, at the latest after statutory retention periods expire.

Recipients and automated decisions

Your data is only shared with the service providers named above (Elgendorfer Str. 57, 56410 Montabaur, Deutschland IONOS SE, IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Deutschland, Self Hostet, Stripe) and with authorities and tax advisors where we are legally required to do so. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Write to us at noreply@finklham.at. You can also lodge a complaint with a supervisory authority, in Austria the Data Protection Authority (dsb.gv.at).

Last updated: October 2026. A German version is also available.