Privacy policy

Effective 25 October 2026.

Xorsand OÜ ("Xorsand", "we") builds Relane, OS One, Retold and Recon. This policy explains what each product stores, what it never stores, and the rights you have over it. The short version is the rule the products are built on: your data stays on your side of the line, and we collect only what is needed to run an account and take a payment.

Who is responsible

Xorsand OÜ, Tallinn, Estonia, is the data controller. Contact: [email protected].

What applies to every product

• Accounts: where a product has an account, it is a username or email address plus a password. Passwords are stored hashed by our account server and are never visible to us. No real name, phone number or identity document is asked for.
• Payments: subscriptions, one-time purchases and donations are processed by Stripe on Stripe-hosted pages. Card numbers never reach Xorsand. We receive the payment status, the amount, the currency and a Stripe customer reference, and keep them as long as accounting law requires.
• Website: the websites set no advertising or analytics cookies and run no third-party trackers. Our hosting and content delivery providers keep ordinary server logs (IP address, time, requested page) for security, for a short period.
• Email: if you write to us, we keep the correspondence to answer it.
• Children: the products are not directed at children under 16.

Relane

Relane is a VPN for restricted networks. It keeps no activity logs and no browsing history: we do not record the sites you visit, the connections you make through the tunnel, your DNS queries or the content of your traffic.

What Relane stores

• The account name you chose, or the email address you registered with, and a hashed password.
• Your plan, and the traffic volume used against the monthly allowance of the free plan. The counter is a number of bytes, not a record of where they went.
• Which devices are signed in, so the plan's device limit can be enforced.
• Payment records held by Stripe if you subscribe, including the paid plan status that Stripe and RevenueCat report back to us.

What Relane does not store

• Browsing or connection history, DNS queries, or traffic content.
• Your real name, phone number or location.

OS One

OS One runs on your computer. Your files, your requests and the memory it builds up stay on your machine; the default AI engine runs locally and nothing is sent to Xorsand to be processed. If you choose to connect a cloud model with your own key, requests go to that provider under its terms, per task and only when you select it.

The OS One account on this website holds your sign-in, your purchase, and which installers you are entitled to download. Payment is taken by Stripe.

Retold

Retold publishes video reports that you choose to upload, together with the caption, the transcript and translations generated from it, and the location at the precision you set when publishing. You decide whether a report shows a city or a street. Uploaded media is stored on our object storage and served from our servers. Metadata used for corroboration (time, place, duplicate detection) is derived from the upload you publish, not collected from your device in the background.

Recon

Recon is end-to-end encrypted. The server handles identity (your @name and a hashed password), discovery and short-lived connection signalling. It does not store conversations, and it cannot read message content or your device keys. When a recipient is offline, an encrypted parcel waits on the server and is deleted once it is delivered. Connection timing, and the fact that two accounts exchanged data, can still be observable to a network watcher; Recon states this rather than claiming otherwise.

Who else sees data

• Stripe, Inc. — payments, invoices and the customer portal.
• RevenueCat — synchronises Relane subscription status between Stripe, the app stores and the app.
• Google Play — if you install Relane from Google Play, Google processes the install and any in-app purchase under its own policy.
• Our hosting providers in the European Union, and a content delivery network in front of the main website, which process traffic to deliver the pages.

We do not sell data, and we do not share it with advertisers. We disclose data only when a law that applies to us requires it, and because Relane keeps no activity logs, there is no browsing history to hand over.

How long we keep it

• Account data: until you delete the account, then removed within 30 days.
• Payment records: for the period Estonian accounting law requires, currently seven years.
• Server logs: a short, rolling period measured in days.
• Recon offline parcels: until delivered, or expired unread.

Your rights

Under the GDPR you can ask for a copy of the data we hold about you, have it corrected or deleted, restrict or object to its processing, and take it with you. Write to [email protected]. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local authority.

Changes

When this policy changes, the effective date above changes with it, and material changes are announced in the Xorsand Notes.