Azayn

Privacy Policy

Last updated: 8 October 2026

1. Who we are

azayn.com and the Air Mouse software are provided by the provider named in our Legal information ("Azayn", "we", "us"). For the personal data described here, Azayn is the controller within the meaning of the General Data Protection Regulation (GDPR).

Privacy contact: privacy@azayn.com

2. What this policy covers

This policy covers the website azayn.com and Air Mouse: the desktop app, the web page on your phone that it pairs with, the licence service, and the Air Mouse pages on this site. Azayn Health has its own Privacy Policy because it handles health data. This policy does not cover Stripe, GitHub, Google or your own email provider, which have their own policies.

3. The short version

  • Air Mouse keeps your camera video on your phone. Hand tracking runs in your phone's browser. Camera frames are never sent to your computer and nothing uploads them. Only a fingertip position, a confidence score and a gesture name travel from your phone to your computer, over your own network.
  • Air Mouse has no account, no analytics, no telemetry and no crash reporting.
  • The only server the app contacts is our licence service, when you activate, renew or deactivate a licence.
  • This website sets no cookies for visitors and uses no analytics or advertising trackers.
  • We do not sell personal data.

4. The website

  • Cookies and trackers: none for visitors. Fonts are hosted by us, not by a third party. Staff who edit the site use a login cookie in the administration area only.
  • Server logs: when you visit, our servers log technical data such as the time, the page requested and your IP address. We use it to keep the service secure and working (Art. 6(1)(f) GDPR) and keep it for up to 30 days. Our web server is configured not to record the full request path or query string.
  • Hosting: our servers are operated by Hetzner Online GmbH in Helsinki, Finland, under a data processing agreement.
  • Buttons and forms: the "buy" and "re-send my key" buttons on the Air Mouse page send you to our licence service or to Stripe. This website does not itself collect what you enter there.

5. Air Mouse: what we collect

When you buy

Stripe collects your email address and payment details on its own checkout page. Card data never reaches us. We receive and keep your email address, the Stripe session, payment and customer identifiers, the amount and currency, and the date.

Your licence

  • A hashed copy of your licence key (so we can find it), its last four characters (so you can recognise it), and an encrypted copy so we can send it to you again if you ask. We do not store the key in readable form.
  • The licence's status (active or revoked, and why), its device limit, and notes our staff may add when they help you.
  • Records of the emails we sent you about the licence, including delivery attempts and any error.

Your computers

When you activate Air Mouse on a computer we receive and keep your licence key (to check it), an anonymous identifier for the installation, the computer's name, its operating system and the app version. The weekly renewal repeats the identifier. To deactivate, the app sends only its signed token. Nothing about your camera, your hand or what you do with the mouse is ever sent.

We also keep an audit trail of events on a licence (created, activated, removed, revoked, email sent, key re-sent) for security and support.

On your computer

The app stores a licence file (an installation identifier and a signed token that includes a masked form of your email address), your settings including paired phones and calibration, and a local certificate authority used for the encrypted connection to your phone. These stay on your computer. The app's activity log is held in memory only and never contains camera frames or hand data.

On your phone

The phone page keeps its pairing credentials in your browser's local storage. It asks for your camera only, not the microphone, and the hand-tracking model is bundled so nothing needs downloading while you work. A new phone cannot control your mouse until you approve it on the computer.

What Air Mouse does not collect

Video frames, audio, an account, analytics or telemetry.

6. Why we use it, and our legal basis

  • Take payment and issue your licence · Data: email, Stripe identifiers, amount · Legal basis: performance of a contract (Art. 6(1)(b))
  • Check and renew your licence, enforce the device limit · Data: key, installation identifier, computer name, platform, version · Legal basis: performance of a contract; legitimate interest in preventing misuse (Art. 6(1)(b), (f))
  • Email you your key and re-send it on request · Data: email, encrypted key · Legal basis: performance of a contract (Art. 6(1)(b))
  • Support, security and fraud prevention · Data: audit trail, logs · Legal basis: legitimate interests (Art. 6(1)(f))
  • Tax and accounting records · Data: purchase records · Legal basis: legal obligation (Art. 6(1)(c))

7. Who we share it with

  • Stripe (Stripe Payments Europe, Ltd., Ireland, and its affiliates) for payments, refunds and disputes. A full refund or a dispute revokes the licence automatically.
  • Google (Google Workspace) to send licence and support emails.
  • GitHub, where Air Mouse installers are stored. When you download, our server sends your browser to a short-lived signed GitHub address, so your browser contacts GitHub directly. We send GitHub nothing about you.
  • Hetzner Online GmbH, which hosts the servers that run the licence service (Helsinki, Finland).
  • Authorities, where the law requires it, and a buyer, if the business is sold.

Processors act on our instructions under data processing agreements.

8. Transfers outside the EU

Our servers are in Finland. Stripe, Google and GitHub may process data in countries outside the European Economic Area, including the United States. Where they do, the transfer is covered by an adequacy decision (such as the EU-US Data Privacy Framework, where the provider is certified) or by standard contractual clauses. You can ask us for a copy of the safeguards at privacy@azayn.com.

9. How long we keep it

  • Purchase and payment records: as long as German tax and commercial law requires, currently up to eight years from the end of the year of purchase.
  • Licence records (key hash, status, devices, audit trail): while the licence exists and afterwards as long as we need them to deal with support requests and legal claims. We delete or anonymise them on request unless the law obliges us to keep them.
  • Server logs: up to 30 days.
  • Administration sessions: deleted automatically when they expire.

10. Security

Licence keys are stored hashed and encrypted; activation tokens are digitally signed; the licence service limits request rates; our administration console requires a password and a one-time code; and traffic to our services is encrypted in transit (TLS). No system is perfectly secure.

11. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent where processing is based on consent. You also have the right to complain to a data protection authority, in particular the one responsible for your place of residence or for our place of business.

To exercise a right, email privacy@azayn.com from the address you bought with, so that we can match the request to your licence. We will answer within 30 days. Access, correction, deletion and export requests are handled by us by hand. If we delete a licence record, Air Mouse can no longer be activated with that key, and we may have to keep the purchase record for tax purposes (section 9).

12. Children

Air Mouse is not directed at anyone under 16, and we do not knowingly collect their data.

13. Changes

We will post changes here with a new date. For material changes we will also tell purchasers by email.

14. Contact

Privacy requests: privacy@azayn.com. Provider details: Legal information.