The short version
Screenr does not sell, rent or monetize your data, and never will. There are no ads, no analytics, no tracking and no crash reporting in the app. Your voice, video, screen, drawings and messages are end-to-end encrypted and go straight to the people you share them with. Our server never receives them. It knows only what it needs to put you in touch with those people: your account, who your friends are, which servers you belong to, and whether you are online.
Who we are
Screenr is run by Code Boss AB, 559212-8564 ("we"). This policy covers the Screenr desktop app, the Screenr server at screenr.eu, and the website at screenr.eu. If you connect the app to a server run by someone else, that person is responsible for the data on their server, and this policy does not apply to it.
What we cannot see
- Calls and screen shares. Audio, video and screen shares travel directly between the people in the call, encrypted with DTLS-SRTP. They never pass through our server, and we do not run relay (TURN) servers.
- Drawings and the laser pointer go directly between participants in the same way.
- Messages and reactions are encrypted and signed on your device and sent directly to the other person's device, or to other members of the server. Our server does not carry them, store them or hold the keys to them.
- Message history is stored only on your own devices, encrypted with a key protected by your operating system's keychain. We have no copy, so we cannot restore it, read it or hand it over.
What our server stores
| Data | Why | How long |
|---|---|---|
| Username | To identify you to friends | Until the account is deleted |
| Password, stored only as an Argon2 hash; we never see or store the password itself | To sign you in | Until the account is deleted |
| If you turn on two-factor: the key your authenticator app shares with us, when you turned it on, the time step of the last code you used (so it cannot be used twice), and your recovery codes, stored only as SHA-256 hashes | To ask for a code when you sign in | Until you turn two-factor off or delete the account; a recovery code is deleted as it is used |
| One session per signed-in device: a hashed sign-in token, a random ID for the install, your computer's name, and when the session was created and last used | So you can stay signed in, and so Settings → Account → Devices can list and sign out your devices | Until you sign out, or 30 days after the session was last used |
| Friends and pending friend requests | So you can call and message friends | Until either of you removes the friendship |
| Servers you own or belong to: their names, room names, text channel names, invite codes and pending invites | To run group spaces | Until the owner deletes the server or you leave it |
| Your chosen status (online, away, invisible) and when you were last online | To show friends and fellow server members whether you are around | Until the account is deleted. While you are invisible, your "last seen" time does not change. |
| Which room you are in, and whether you are sharing your screen | To show the room list | Only while you are in the room |
What our server handles without storing
- Connection set-up (signaling). To start a call or a chat link, the two apps exchange connection details, including network addresses, through the server. The server forwards these and does not keep them. While doing so it necessarily sees who is connecting to whom, and when.
- Direct calls (ringing, accepted, ended) exist only in the server's memory while the call lasts. They are never written to disk.
- Your IP address is seen by the server on every connection. The server uses it in memory to limit how often someone can try to sign in, and does not store it in its database. Our web server's access logs record IP addresses for 7 days.
- Operational logs record events such as "user 42 connected", with the user ID and device ID, for troubleshooting. They are kept for 7 days and never contain message or call content.
What other people and services can see
- The people you call or message connect to your device directly, so they can see your IP address. Screenr does not relay traffic, so it has no setting to hide your IP address from them. If that matters to you, use a VPN.
- Friends and fellow server members see your username, your status, the room you are in and whether you are sharing your screen. They also see your "last seen" time, unless you are invisible.
- STUN servers. To find a direct route between you and the other person, the app asks a STUN server for your public address. By default these are Google's and Cloudflare's public STUN servers, which see your IP address. They see nothing else, and none of your content.
- Updates. Every six hours the app checks
screenr.eufor a new version, which reveals your IP address and the version you are running. You can turn this off with--no-update. - Notifications are shown by your own operating system. Screenr does not use a push service, so notification content never leaves your device.
How you can check who you are talking to
Each device has its own encryption key. The app trusts a key only when it receives it directly from that device, never when someone else passes it along. A message that reached you through another member, from someone your device has not yet connected to directly, is marked unverified. Each direct message conversation shows a safety number. If you and your friend compare it (in person or on a call) and it matches, nobody, including us, is intercepting your messages.
Legal basis
We process the data above because it is needed to provide the service you signed up for (GDPR Article 6(1)(b)). We also have a legitimate interest in keeping the service secure and free of abuse, for example by limiting sign-in attempts (Article 6(1)(f)). We make no automated decisions about you.
Who we share data with
No one, except:
- Our hosting provider, Hetzner, which runs the server in Germany, EU. It processes data only on our behalf.
- Authorities, when the law requires it. A binding legal order could only ever get the metadata listed above, because that is all we have. We have no message or call content to give.
We do not transfer your data outside the EU/EEA.
Your rights
You have the right to see, correct, export and delete your data, and to object to how we use it. Email emil@codeboss.se and we will reply within 30 days. You may delete your account from within the app. When your account is deleted, everything in the tables above is removed from the server. Message history on your devices stays there until you delete it or uninstall the app. If you are not satisfied with our answer, you can complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or to the data protection authority where you live.
Changes to this policy
If this policy changes in a way that matters, the app's release notes will say so, and the date at the top will change.
Contact
emil@codeboss.se, Code Boss AB (559212-8564)