LegalNaytto
Privacy Policy
Naytto lets you use your own computers from a web browser. This policy explains what Naytto keeps about you, why, for how long, who helps us run the service, and how to get a copy of your data or delete it.
The controller is Relyt Works LLC, 1925 Lovett Avenue, STE 7 278, Bismarck, North Dakota 58504, United States. Contact: privacy@naytto.com.
What Naytto never stores
The picture of your screen, what you type, pointer movements, clipboard contents and the files you transfer are encrypted between your browser and your computer (WebRTC DTLS-SRTP and DTLS). They don't pass through Naytto's servers, and the relay forwards encrypted packets it cannot read. Your browser verifies your computer against the public identity key registered on your account by the enrolled app. The private key stays on the computer. Existing browser verification records also detect unexpected changes to the account record. A changed identity blocks the connection; restoring the original identity or removing and adding the computer again restores access. Naytto's service delivers the browser software, so this verification still depends on authentic software from our service. Naytto does not record sessions. The support report on the Computers page is created in your browser and is sent only if you choose to send it yourself.
Sessions use the private relay by default, keeping each side's network address from the other. A direct connection requires the computer owner's permission and permission for that browser session; both sides may then learn each other's network addresses. The session remains encrypted, and the relay remains available as fallback. Choosing Always use private relay on the computer turns direct connections off.
What Naytto stores
| Data | Why | How long |
|---|---|---|
| Account: email address, account ID, when the account was created, when you were invited, whether an authenticator app is on | To identify you, sign you in, email you security notices and, unless you unsubscribe, emails about plans | Until you delete the account |
| Sign-in methods: passkey names, dates and public keys; the authenticator app secret and backup codes, encrypted; email sign-in codes and account recovery codes, hashed | To sign you in and recover your account | Until you remove them or delete the account. Email codes and unfinished recovery-code setup expire after 10 minutes and are removed within an hour. Saved account recovery codes remain until replaced or the account is deleted. Recovery attempts expire after 10 minutes and are removed within an hour. |
| Signed-in browsers: IP address, browser user agent, when you signed in and were last active, and how you signed in | To keep you signed in, show you where you're signed in and detect abuse | Until you sign out or the sign-in ends (after 3 idle days, 14 days at most, or 1 day on a shared computer), then removed within an hour |
| Computers: each computer's name, ID, date added, a hash of its credential, its connection permission (private relay or allow direct), when it was last seen, whether its permissions are granted, its Keep reachable state, its latest health report (CPU use, memory used and total, system disk free and total, battery level and power state, uptime, app version and build, OS version and report time), and the ID and outcome of its latest remote session. While it is connected, its public IP address (or IPv6 /64). | To show your computers and connect you to them | Until you remove the computer or delete the account. The IP address is kept only while the computer is connected. Each health report replaces the previous report; no health history is kept. |
| Activity: sign-ins; computers added, renamed or removed, and their connection permission changes; remote sessions started and ended, with how they ended; and the account's deletion, with its email address. For sign-ins, computers added and sessions started, also the IP address, country and browser user agent. | To show you recent activity, and to investigate security problems and abuse | 365 days. After you delete the account, 90 days, so deleting an account can't erase recent evidence of abuse. |
| Suspension: if we suspend the account, the reason and date | To prevent abuse and let you appeal | Until the account is reinstated or deleted |
| Abuse reports: reports about an account or computer: the reason, the reported account and email, the computer, the reporter's contact address and message, and for reports from the public page, the reporter's IP address and country | To investigate and stop unauthorized access and scams | 365 days, including after the reported account is deleted |
| New-signup checks: the network (IP address or IPv6 /64) of each new signup, not linked to an account | To limit mass signups | 1 day |
| Relay usage: traffic per day, and your usage warning setting | To enforce plan limits and warn you | 365 days, or until you delete the account |
| Relay credentials: for each connection you request, the account, computer and session IDs, the username of its relay credential, when the credential expires and when it was revoked. A computer also keeps the usernames of its credentials it hasn't revoked yet. | To limit the sessions you have at once to your plan's, and revoke credentials no longer in use | Until the credential expires, then removed within an hour, also after the session ends or the computer is removed: at most about 12 hours after it was recorded. A computer forgets a credential's username as soon as its revocation is recorded; a session that ended before Naytto started keeping these records loses its username the next time that computer's status is read. For sessions already open when Naytto started keeping these records, removed within a day of that start. Deleting the account removes the account's records at once. |
| Billing: your plan, subscription status and renewal date, and your Stripe customer ID. Your invoices are read from Stripe when you open Account; Naytto doesn't copy them. Naytto never receives your full card details. | To give you the plan you paid for and show your billing | Until you delete the account. Stripe keeps its own payment, invoice and tax records under its privacy policy. |
| Email counts: how many emails we sent your account each month | To manage the service's costs | Until you delete the account |
| Milestones: when the account was created, added its first computer, first connected to a computer, first paid and first cancelled a plan, and when it was first sent each email about plans, first opened a link in one, answered the survey or unsubscribed, stored with only the account ID | To count how many people sign up, use and pay for Naytto | Until you delete the account. Then the account ID is removed, and only the milestone and its time remain, linked to no one. |
| Emails about plans: which of these emails we sent you and when: one the first time the Free plan refuses another computer or new connections, and up to two after a paid plan ends. Also whether you unsubscribed from them. They contain no tracking images; we count only whether you open a plans or survey link in them. While one is being sent, we also keep a copy of it (your address, the text and its links) so an interrupted send can finish without sending it twice. | To tell you about plans when they matter to you, never send the same email twice, and stop when you ask | Until you delete the account. The copy is deleted once the email is sent or given up, within about a day. |
| Survey answers: your answer to "Why did you stop your plan?": the choice, the note if you add one, and when | To learn why people stop paying and decide what to improve | 365 days, or until you delete the account |
| Support and abuse email: messages you send to support@, privacy@, security@ or abuse@naytto.com or through Contact support, and our replies | To answer you | As long as needed to handle the request and any follow-up |
| Service logs: request details such as the time, path, result and the network's location, and error messages | To operate and debug the service | 7 days (Cloudflare Workers Logs) |
| Email delivery: recipient, subject, content and delivery status of the emails we send you | To send sign-in codes, notices and emails about plans, and confirm they were delivered | 30 days (Resend). Backups persist for 7 days. |
Database backups (point-in-time recovery) keep changes, including deletions, for 30 days. Deleted data leaves the backups within 30 days of its deletion.
When you pay for a plan, Stripe collects your name, email address, billing address, country and payment details at checkout. Stripe sells you the plan as our reseller (merchant of record) and is responsible for that data as a controller under its privacy policy; it also processes payment data for us as a subprocessor.
Naytto does not sell personal data or show advertising. The Naytto app (app.naytto.com) runs no analytics or tracking in your browser; milestones are recorded by our servers. The website naytto.com counts page views with Cloudflare Web Analytics, which uses no cookies, and uses Google Analytics only if you agree to it (website analytics). We disclose data to law enforcement only in response to valid legal process.
Legal bases (GDPR and UK GDPR)
- Performing our contract with you: your account, sign-in, computers, sessions, relay usage, relay credentials and plan.
- Consent: Google Analytics on the website. You can withdraw it at any time.
- Legitimate interests in keeping the service secure and working, and in preventing unauthorized access and scams: activity, suspensions, abuse reports, new-signup checks, service logs, the human check, and security notices. Also in knowing how many people visit the website and try, use and pay for Naytto: cookieless website page views and milestones. And in telling account holders about plans, with a one-click unsubscribe in every such email, and learning why people stop their plans: emails about plans and survey answers.
- Legal obligations: records we must keep, such as billing and tax records.
Cookies and browser storage
The Naytto app uses only strictly necessary cookies, so it asks for no cookie consent:
Cookie (__Secure-better-auth. prefix in production) | Purpose | Lifetime |
|---|---|---|
session_token | Keeps you signed in | 3 days after last use, or until the browser closes on a shared computer |
dont_remember | Marks a sign-in on a shared computer | Until the browser closes |
two_factor | Carries an unfinished sign-in to the authenticator step | A few minutes |
passkey challenge | Carries a passkey ceremony | A few minutes |
The app also keeps settings in your browser's local storage: display mode, keyboard layout, list or map view, whether this is a shared computer, whether you dismissed the passkey prompt, and the connection route last used to each computer. These settings never leave your browser. During account recovery, session storage also keeps a random attempt ID so a lost response can be retried. Naytto receives that ID and keeps it for the 10-minute recovery window. Recovery codes are never saved in browser storage.
Before sending an email sign-in code, Naytto runs Cloudflare Turnstile, a human check that reads your IP address, browser details and page to block automated abuse. Cloudflare describes this processing as strictly necessary to detect and block bots, and it sets no cookie.
Website analytics
Every page of naytto.com counts visits with Cloudflare Web Analytics. It sets no cookies, stores nothing in your browser and doesn't follow you across websites or identify you by your IP address or browser details, so it doesn't ask first. Cloudflare records the page you visit (without its query string), the site that sent you, your browser, operating system and device type, your country and how fast the page loaded. Cloudflare keeps the full data for 7 days and a sample of it for 6 months.
The website also uses Google Analytics. It first asks whether you accept analytics, and Google Analytics loads only after you choose Accept. If you choose Reject, or don't choose, the website sets no analytics cookies and sends nothing to Google. Your choice is stored in your browser, and you can change it at any time from Cookie settings at the bottom of every page.
If you accept, Google Analytics sets the _ga and _ga_<ID> cookies (up to 2 years) and receives the pages you visit, clicks on sign-up and plan buttons on the homepage and pricing page, how you arrived, your browser and device type, and your approximate location from your IP address. Google Analytics does not store IP addresses. We use it only to understand how people find and use the website. Google signals and advertising data sharing are off, and Google keeps the data for 14 months.
Google Search Console tells us how naytto.com appears in Google Search. It receives no data from visitors to the website.
Who processes data for us
Naytto uses the subprocessors listed here. Cloudflare hosts the service, relays connections, provides the human check and counts website visits. Resend sends sign-in codes, notices and emails about plans. Google Workspace receives the email you send to our support, privacy, security and abuse addresses, including Contact support messages and abuse reports. Google Analytics measures the website for visitors who accept it. Stripe takes payments for paid plans.
International transfers
Naytto runs on Cloudflare's global network, and our database is hosted by Cloudflare in the United States. Email to our addresses is handled by Google Workspace in the United States, and payments by Stripe in the United States. Data from the EU, EEA, UK and Switzerland is transferred to these companies under their data processing terms, which incorporate the EU Standard Contractual Clauses with the UK and Swiss adaptations, and under their certifications to the EU-US Data Privacy Framework and its UK and Swiss extensions. Resend stores email content and delivery logs in the United States under its Data Processing Addendum, which incorporates the Standard Contractual Clauses and the UK and Swiss adaptations. Naytto does not offer EU data residency.
Your rights
Wherever you live, you can:
- Get a copy of your data. In the app, go to Account → Your data → Download my data. The file includes your account, the names and dates of your sign-in methods, signed-in browsers, computers, activity, relay usage and relay credentials, your plan, milestones, the emails about plans we sent you and your survey answer. It leaves out secrets such as keys, codes and credential hashes, the connection state each computer keeps for its current session and for relay credentials it hasn't revoked yet, and the records held only by Cloudflare or Resend (service logs and email delivery data). Contact us for those. If it's been more than 10 minutes since you signed in, or if you signed in with only an email code while you have a passkey, Naytto first asks you to sign in again.
- Delete your account. Go to Account → Delete account. Naytto cancels any paid plan, removes your computers, which ends their sessions, and then removes the rest of your data immediately. The exceptions expire on the schedule above: activity (90 days after deletion), relay credentials a computer hasn't revoked yet, abuse reports, support email, service logs, email delivery records and backups. Milestones stay only as anonymous counts, without the account ID. A record of the deleted account's ID is kept for 35 days, so restoring a backup can't bring the account back.
- Stop emails about plans. Every email about plans has an Unsubscribe link, and mail apps that offer one-click unsubscribe use it too. Unsubscribing stops all of them for good. Sign-in codes and security notices still arrive, because they protect your account.
- Correct your data. You can rename computers and passkeys in the app. To change your email address, contact us.
- Object, restrict processing, or complain. Contact us. In the EU, EEA or UK, you can also complain to your data protection authority.
California (CCPA/CPRA): Naytto does not sell or share personal information for cross-context behavioral advertising and does not use sensitive personal information to infer characteristics. Google Analytics on the website runs only with your consent, as our service provider, with advertising features off. The categories we collect are identifiers (email, IP address, account and computer IDs), commercial information (your plan and billing history), internet activity (sign-in and session activity, milestones, service logs) and approximate location derived from IP address. We collect them for the purposes and retention periods above. You have the right to know, delete and correct, and Naytto will not discriminate against you for using these rights.
We answer requests within 30 days.
Children
Naytto is not intended for children under 16, and we don't knowingly collect their data.
Changes
We'll email account holders before a material change takes effect. Last updated: 2026-10-26.