Privacy Policy StateWarden

Data Controller: Cyberprime Sp. z o.o. ul. Aleksandra Lubomirskiego 20, 31-509 Kraków, Poland KRS: 0001223916 | NIP: 6751825046

1. Introduction and System Division

In the interest of the highest standards of security and transparency, our Privacy Policy clearly separates data processing rules depending on which part of the StateWarden infrastructure the User utilizes. The system architecture is divided into two isolated zones:

Promotional and Sales Zone (Public Website - statewarden.com / help.statewarden.com): Used for informational, marketing, and educational purposes.
Service Zone (Client Panel - dash.statewarden.com, WebAPI, and StateWarden Agent): A strict operational zone used for managing backups and securing User infrastructure.

2. Promotional and Sales Zone (Public Website)

While using the informational pages (e.g., www.statewarden.com), we process only the minimum technical data required to serve the website securely and measure aggregate reach on our own infrastructure.

Cookies and Tracking: The Promotional Zone uses NO third-party cookies or trackers. We do not implement external web analytics platforms or advertising networks. Only first-party storage strictly necessary for the website's operation is used.
Automatically Collected Data: Standard web-server logs (IP address, browser type, device type, time spent on the site, visited subpages), processed exclusively on our own infrastructure.
Transparency: An informational notice about the exclusive use of first-party cookies is displayed during the first visit.

3. Service Zone (Dashboard, WebAPI, Agent Application)

The Service Zone was designed in accordance with the philosophy of Privacy by Design and Zero External Dependencies.

No Tracking or Ads: In the Client Panel (dash.statewarden.com) and client applications, NO third-party analytical scripts (e.g., Google Analytics, Meta Pixel) or advertising scripts are implemented. Your actions within the system are completely private.
Strictly Necessary Cookies: The Service Zone uses only strictly necessary cookies required for session authorization (e.g., JWT tokens, CSRF protection).
Collected Personal Data: To provide the service, we collect only the absolute minimum of data:
- E-mail address (for login and system notifications).
- Billing data (processed securely by our payment operator - Stripe).
- System logs (login IP, audit actions within Realm Logs).
Telemetry: The system collects necessary technical telemetry from devices (e.g., disk usage, Vigil antivirus scan status, backup size) solely for the purpose of providing the service, monitoring Quotas, and notifying the User of threats.

4. Zero-Knowledge Architecture and Data Secrecy (Backups)

Data contained in backups sent to StateWarden's self-hosted data centers (Driad) is subject to rigorous, Client-Side encryption architecture called PrimeKEM (Cascade Cryptography).

No Access to Data: Cyberprime Sp. z o.o. DOES NOT POSSESS decryption keys nor the technical capability to inspect the contents of your backups, files, directory structures, or disk images (BMR).
User Responsibility: Due to the Zero-Knowledge architecture, in the event the User loses the Master Key, data recovery by the Administrator is mathematically and technically impossible.

5. Payments and Processors

The payment operator and Merchant of Record for StateWarden services is Stripe. Payment card data is never touched or stored on Cyberprime servers; it goes directly to Stripe's secure infrastructure.

6. User Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), the User has the right to:

Access their data and receive a copy of it.
Rectify (correct) their data.
Erasure (Right to be forgotten) – an automated option to request the deletion of the account and all associated telemetry data and backups is available in the user panel.
Restrict processing and data portability.

7. Contact

For matters related to personal data protection, please contact us at: [email protected].