Information you provide
Account
Your sign in. Magic links and receipts go here. Kept while the account exists.
Shown to people who share a machine or a room with you. Change it any time in settings.
Only if you sign in with a provider that offers one. Never fetched otherwise.
If you create your account through someone's referral link, we keep a note of whose link it was. That person sees your display name, the day you joined and whether you have paid for a plan, your own or an organization's you are billed for, never your sessions or what you paid.
Machines
A label to tell your machines apart on the dashboard and in a room.
Reported by the host so the service knows which features and codecs it can offer.
So support can tell whether a problem is already fixed in a newer build.
The host's address and region, stored with the machine to choose a relay near it.
On a paid plan, a few seconds of the stream for the public devices page, recorded by a viewer's browser every five minutes while someone watches. Each clip replaces the last. Turning previews off stops new clips, and the last one stays until you clear it in the machine's settings.
Settings
Video quality, audio device, input permissions, notification preferences, visibility and access for each machine. These are yours and exist only to be applied.
Billing
| Item | Why | Held by |
|---|---|---|
| Billing address | Tax and receipts | Payment provider |
| Payment method | Charging the plan | Payment provider, as a token |
| Transactions | Charges, refunds, invoices | Alluno and the provider |
| Tax information | Where the law requires it | Payment provider |
Information a session produces
Used to connect a viewer. Not written to any session record.
When a session started and ended, over which transport, the most viewers it had at once, and which accounts joined and left.
Analytics, only if you accept
The first time you visit, the site asks before it collects anything below, and you can change your answer at any time with Privacy choices in the site footer. It is stored on servers Alluno runs in Singapore, is never sold or shared, and is deleted after 14 days.
Which pages you open, what you click, errors the page hits and how long things take to load, so we can find what is slow or broken.
A replay of the page as you used it, rebuilt from its layout, your mouse movements and your clicks. Anything you type into a field is hidden, and the remote screen of a session is never captured.
Browser, operating system and device type, to reproduce a problem on the same setup.
Your account ID, display name and email address, so a report can be tied to the account it came from.
Cookies and storage
Essential cookies and storage work without asking, because the site cannot sign you in, finish a step you started or remember a setting without them. Analytics is the only kind that waits for your consent.
| Cookie | What it does | Kept for | Needs consent |
|---|---|---|---|
auth_token | Keeps you signed in | 30 days | No |
guest_token | Lets you join a session as a guest | 3 hours | No |
auth_return, auth_link | Brings you back to the right page after signing in or linking a sign in provider | 10 minutes | No |
alluno_oauth_flow, alluno_oauth_choice | Carries a sign in with a provider through to the end | 10 minutes | No |
alluno_ref, alluno_invited | Remembers the referral link you arrived through, so its owner is credited when you sign up | 30 days | No |
i18n_locale | Remembers your language | 1 year | No |
Your browser's local storage also keeps your choices on this device: your theme, stream and controller settings, the devices page view, the workspace you last chose, whether you are signed in, awards you have already been shown, where you are in joining an invite, and your answer to the analytics question. It stays in your browser, and clearing your browser data removes it.
If you accept analytics, your browser also keeps a random ID that ties one visit's analytics together, and your account ID while you are signed in, under names starting with alluno:analytics:. The random ID is replaced when you sign in, sign out or switch accounts, after 15 minutes without activity, or after 4 hours at most, and both are removed when you withdraw.
What is never collected
Session content
No screen recordings or screenshots beyond the preview clips you turn on, no keystroke capture, no audio, no file contents, no record of which apps you used.
Personal data on the host
No documents, media, browsing history or private messages. The host captures a display; it does not read a disk.
How long things are kept
| Data | Kept for |
|---|---|
| Account and settings | While the account exists |
| Machines | Until you unpair them, or the account closes |
| Session records | Until you delete the machine, or the account closes |
| Preview clip | Until the next clip replaces it or you clear it |
| Analytics and session replays | 14 days |
| Billing records | As long as tax law requires |
Deleting the account from settings removes the account, its machines and their records at once. Billing records remain only for as long as the law says they must.