Privacy Policy

1. Who we are

WhipDesk, operated by BinaryBanana LLC ("WhipDesk," "we," "us"), provides a remote-desktop tool that lets you connect to your own machines and check on the AI agents running there. This policy explains what we collect and what we very deliberately don't.

2. What we collect

Only what's needed to introduce your devices and keep your account working:

• Account info: your email address, used to sign you in and authenticate both ends of a connection.
• Device metadata: the name, OS, and online status of machines running the agent, plus any activity labels you choose to display.
• Abuse signals: your account-creation time and a one-way hash of the IP addresses you sign in from — never the address itself, and we can't turn it back into one — used only to stop a single person spinning up many accounts and overloading the shared relay.
• Minimal diagnostics: basic, aggregated error and connection logs so we can keep the relay healthy.

3. What we can't see

Your remote-session screen contents and control input never reach us. Sessions run over WebRTC and are end-to-end encrypted between your devices. Even in TURN mode — where we relay traffic because your network blocks peer-to-peer — we only ever pass along sealed, encrypted packets. We couldn't read them if we tried, and we don't.

4. Cookies & local storage

We use the bare minimum to run the site: a session token to keep you signed in, and a small local-storage value (wd-theme) that remembers whether you prefer light or dark mode. Our analytics also set cookies — including first- and third-party cookies from Microsoft Clarity — to measure how the site is used (see "Analytics" below). We don't run our own advertising or ad-retargeting cookies.

5. Analytics

To understand which features land and what's broken, we use privacy-respecting product analytics. This includes Microsoft Clarity, which captures anonymized session replays and heatmaps — how pages on this site are clicked, scrolled, and navigated — so we can spot confusing flows and fix bugs. Clarity uses first- and third-party cookies and similar technologies to do this, and Microsoft may use the data it collects as described in the Microsoft Privacy Statement (https://www.microsoft.com/privacy/privacystatement), including to improve and market Microsoft's own products and advertising. We may also use aggregate analytics such as Google Analytics for Firebase. None of this ever touches your screen, your files, or anything inside a remote session — only how you move around this website — and you can block all of it with any standard content blocker.

6. How we use your data

To create and secure your account, introduce your devices to each other, show you their status, keep the service running, prevent abuse of our service, and contact you about important changes. That's it — no profiling, no selling, no surprise newsletters.

7. Sharing & processors

We don't sell or rent your data. To run WhipDesk we rely on a handful of infrastructure providers — chiefly Google Firebase for sign-in and our database, plus hosting, signaling (STUN/TURN), and email delivery — and we share only the minimum each one needs to do its job. If the law compels us, we'll push back where we can and tell you where we're allowed to.

8. International data transfers

Our providers may store or process data in countries other than your own, including the United States. Wherever it goes, your data keeps the same protections described here, and we rely on appropriate safeguards (such as standard contractual clauses) where the law requires them.

9. Security

Connections are encrypted by protocol. The agent stores only a salted, stretched PIN-derived key; the controller computes a one-time response in memory. The PIN never crosses the wire or reaches our servers. Account access is tied to your email. Want to audit any of this? The relevant code is open source.

10. Retention & your rights

We keep account data only while your account is active. You can request access to, export of, or deletion of your data at any time — just email us and we'll sort it out. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA.

11. Children

WhipDesk isn't intended for anyone under 16. We don't knowingly collect data from children.

12. Changes

If we update this policy, we'll change the date above and, for anything significant, give you a heads-up. Continuing to use WhipDesk after a change means you're OK with it.

13. Contact

Questions, requests, or privacy concerns? Start with the GitHub project, issues, or pull requests; email [email protected] only if needed. We actually read it.