Privacy policy DasDing

Translation

Translation for convenience – the German version is legally binding: Datenschutzerklärung DasDing.

Draft

Version 1.0 (draft), October 2026 – will be reviewed by P.A.S.S. before publication.

This policy describes which personal data is processed when you use DasDing (website, DasDing program and the associated services). It supplements the privacy policy of P.A.S.S. (in German). The revised Swiss Federal Act on Data Protection (FADP) is decisive; where applicable, also the GDPR.

1. Controller

Petersen Advanced Security Solutions (P.A.S.S.)
Owner: Hendrik Petersen
Muttenstrasse 3, 4500 Solothurn, Switzerland
E-mail: info@your-pass.org · Imprint

2. Principles

• We only process the data needed for the respective service.
• No tracking, no advertising, no profiles, no sale of data.
• The DasDing servers are located in Switzerland on the P.A.S.S. infrastructure.
• Wherever possible, encryption is end-to-end or only on your device – then not even we can read the content.

3. Website

• No cookies, no analytics or tracking tools, no fonts or scripts from third-party servers.
• The web server logs technically necessary information (IP address, time, page accessed, browser identifier) for operation and to fend off attacks. These logs are deleted after 14 days.

4. Account and sign-in

Data	Purpose	Retention
User name, password (only as a check value or checked via the media server, never in plain text), roles	Sign-in, permissions	until the account is deleted
Sign-in log (user name, time, IP address, result)	Detecting abuse, blocking after failed attempts	90 days
Two-factor sign-in: encrypted secret, recovery codes (only as a check value), device names	Protecting the account	until it is switched off or the account is deleted
E-mail address (if stored)	Resetting the password, notices about the account – no newsletters	until you have it deleted
Language choice (German or English)	Program, messages and e-mails in your language	until the account is deleted
Support requests (name, message, contact details)	Handling the request	as long as needed for handling

“Stay signed in” stores the credentials only on your device in the operating system's keyring.

Account with the purchase, “Refer a friend” campaign

If you create your account when buying a plan, we store the user name, password (only as a hash) and e-mail address (for invoices via Stripe and password help). Until the payment is confirmed we keep this information for at most 24 hours; after that it is deleted or transferred to your account. For the “Refer a friend” campaign we store which account referred which other account (account names, code, date, status) and pass the code to Stripe as a note.

5. Personal storage and program

• Files in your personal storage are stored exclusively to provide the service. P.A.S.S. does not look at your files. New files are automatically checked for malware locally on the server (ClamAV); detection reports (user name, file, time, IP address) are kept for 90 days.
• Deleted files stay in the recycle bin for 30 days; after that they are permanently deleted. If an account is closed, the storage is permanently deleted after 30 days.
• Changes to the storage limit and recycle bin operations are logged without IP address for 12 months.
• Sync, drive: the settings (which folders) are stored only on your device.
• Cloud connections (Nextcloud, Dropbox, OneDrive): the credentials are stored only on your device; files are transferred directly between your device and the respective provider. The privacy policies of these providers apply to them.
• Password vault and encrypted containers: encryption and decryption take place only on your device. Only the encrypted file is stored on the server – without your password it can't be read by anyone.
• Automatic updates: the program regularly asks download.dasding.tech for new versions (your IP address appears in the web server log, see section 3).
• Sharing files by link (“Shared”): for every link, the server stores the identifier, the file path, the expiry time and a hash of the password (never the password itself). Whoever opens the link doesn't need an account; the IP address of the person accessing it appears in the web server log (14 days, section 3). Creating and deleting links is logged without IP address for 12 months (user name, file, time). Links are deleted once the chosen validity (at most 30 days) has expired.
• Container protection: before every upload of an encrypted container, the server keeps the previous version for 24 hours and then deletes it automatically; like the container itself, it can only be read with your password.
• Software area: the program loads the list of programs (names, versions, vendor links, logos) from download.dasding.tech. Which programs you download or install stays on your device – the server learns nothing about it. Your device fetches the installation file directly from the vendor; the vendor's privacy policy applies.
• Playing audio/video: playback streams the file directly to your device like a download; the last position played is stored only locally.

6. Chat (Matrix)

• The chat runs on our own Matrix server (pass-live.ch). Your chat account, your rooms, messages and shared files are stored so that you can see them on all devices – until you delete them or your account is closed.
• Not even we can read messages in end-to-end encrypted rooms.
• If you join rooms on other Matrix servers, the data needed for this (e.g. your chat address and messages in that room) is transferred to those servers.
• For voice and video calls, our TURN server relays the encrypted connection; it stores no content.

Linked messengers (Signal, Telegram)

You can voluntarily connect your Signal or Telegram account to your chat account. Your messages from these services then run via our chat server and are stored there – including the messages of your conversation partners who don't have an account with us. The encryption of these services ends at our server. To connect, the phone number and sign-in codes are only passed to the respective service, not stored by us. You can disconnect the link at any time in the program; the imported chats are then deleted on our server. We only log who linked or disconnected a service and when.

7. Remote help

• Picture, chat and control run end-to-end encrypted directly between the devices involved, or encrypted via our TURN server. Nothing is recorded.
• Our server only brokers the connection and stores metadata: who with whom, when, for how long, whether control was allowed, as well as reports of abuse. These logs are kept for 12 months.
• Your name and your note are visible to other authorized users only while you have switched on “available”.
• Quick Support (help for people without DasDing): the one-time link is valid for one hour and exactly once; our server stores only a hash of it, the time and the helper's name. The guest downloads a small program without installation and without an account; it transfers no data except the encrypted screen connection. The same metadata logs (12 months) as for remote help apply.

8. Storage plans and payment (Stripe)

• Payments are processed by Stripe (contracting party for Switzerland: Stripe Payments Europe, Ltd., Dublin, Ireland). For this, Stripe receives the name, e-mail address, billing address and card data. P.A.S.S. receives no card data. Stripe may also process data in the USA (Stripe, Inc.); recognized safeguards exist for this (Swiss-U.S. Data Privacy Framework or standard contractual clauses). See Stripe's privacy policy.
• We only store: your user name, Stripe customer and subscription ID, package, status, term and billing data. Because of the statutory retention obligation, this contract data is kept for 10 years. A log of plan operations (without payment data) is kept for 12 months.
• Stripe issues invoices and receipts on our behalf and sends them by e-mail.

9. Own private media library – only Premium with VIP access

Every premium customer with VIP access receives their own private media library into which they can upload their own videos, music and audiobooks. Free software (Jellyfin, Audiobookshelf) on our own server is used for this. The same account data as for DasDing applies to sign-in.

• Each media library is visible only to the person who uploaded the content. There are no shared libraries; other customers have no access.
• We don't look at the content and don't analyze it. In addition, only the playback progress, bookmarks and your settings are stored – until you delete them or your account is closed.
• The files are stored on our server in Switzerland and are not passed on to third parties.

10. Disclosure

Personal data is only passed on if this is necessary for the service (Stripe for payments), if you initiate it yourself (e.g. cloud connections, chat with other servers) or if there is a legal obligation.

11. Security

Encrypted transmission (TLS), encryption on your device for the vault and containers, two-factor sign-in, blocking after repeated failed attempts, separate services with minimal rights, regular updates. Data security breaches are reported in accordance with art. 24 FADP.

12. Your rights

You have the right to information, correction, deletion, release of your data and objection. Requests to info@your-pass.org – we answer within 30 days. You can lodge complaints with the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

13. Changes

Changes to this policy are published on this page; we inform plan customers of significant changes by e-mail.