Privacy Policy
This privacy policy informs you about processing of personal data.
This privacy policy is available on our website and may be printed at any time.
This privacy policy applies to this website (netbird.io) and all the subdomains of the domain netbird.io (e.g. app.netbird.io).
We reserve the right to adjust this privacy policy at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the application process or other processes.
General information
What are personal data?
"Personal data" are any information relating to an identified or identifiable individual person, such as a person's name or also their hobbies. "Processing" of data means any operation or set of operations carried out with or without the aid of automated processes relating to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or integration, limitation, erasure or destruction.
The legal basis for data protection can be found in particular in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC ("General Data Protection Regulation", GDPR), as well as in the Federal Data Protection Act (BDSG) and Telemedia Act (TMG).
We process personal data only to the extent necessary and for the purpose of providing a functional and user-friendly internet presence, including its contents and the services offered there.
Controller
NetBird GmbH c/o Max-Beer-Straße 2-4 Münzstraße 12 10178 Berlin
Email: legal@netbird.io Represented by Managing Directors: Mikhail Bragin and Maycon Santos
Registered with the local court of Amtsgericht Berlin (Charlottenburg) under HRB 237529 B
Controller is any natural or business person, which decides on the purpose and means of data processing on its own or jointly with others.
Scope and location of data processing
We as well as our external service partners process your data for the purpose of providing the website and our services, including providing hard- and software through such external service partners. The data categories affected are contact information, user behavior or other information that constitutes personal data provided to us. We process your personal data in the EU/EEA. If we process personal data outside the EU/EEA, data protection standards applicable in the EU are ensured and we will inform you accordingly. For details on other controllers or processors processing your data for the purposes mentioned in this privacy policy please refer to the table below.
We process your personal data as follows (or as otherwise described in this privacy policy or information provided to you):
| DATA | PURPOSE | LEGAL BASIS |
|---|---|---|
| contact data, contract data, usage data, other data provided | Communication in order to establish, implement and/or process a contractual relationship (also orally) with you | contact data, contract data, usage data, other data provided |
| contact data, contract data, other data provided | compliance with legal obligations, e.g. commercial, tax and social security detention obligations | Art. 6 para. 1 s.1 lit. c. GDPR |
| contact data, contract data, other data provided | enforcement, exercise and defense of legal claims with our legitimate interest that may be, for example, in the assertion of legal claims and defense in legal disputes | Art. 6 para. 1 s.1 lit. c. GDPR |
| contact data, usage data, other data provided | analysis of data with our legitimate interest of, for example, quality assurance or marketing | Art. 6 para. 1 s.1 lit. c. GDPR |
| contact data, usage data, other data provided | consent to data processing for the purpose named in this privacy policy or information provided to you | Art. 6 para. 1 s.1 lit. c. GDPR |
In the event, you refrain from providing such data you may face legal disadvantages, for example, no answer to your email sent to us.
Furthermore, we have implemented technical and organizational measures to ensure that the data protection regulations are observed both by us and by external service providers. The website is operated through a safe SSL-connection. If an SSL-connection is activated third parties are prevented from reading any data that are transferred by you to us.
Your rights
You have the following rights:
the right to access
- the right to rectification or erasure
- the right to restriction of processing
- the right to data portability
- the right to withdraw your consent
You further have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data based on point e or f of Art. 6 para. 1 s.1 GDPR, including profiling based on those provisions.
To act according to your rights set forth above you may contact us via email to legal@netbird.io .
You have the right to lodge a complaint with the data protection authority of your choice (for example der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg).
Storing and deleting data
The data are deleted if you withdraw your consent and/or such data are no longer necessary for the purpose of processing. We or the engaged third party services delete your data according to the following criteria: Time and completion of requests, lapse of legal retention periods, settings provided by third party providers etc. Furthermore, we store your data if we are obliged to do so in accordance with legal retention periods (e.g. German Commercial Code (HGB) or German Fiscal Code (AO)).
Sharing data
NetBird lets you share your recordings with other people via a unique, cryptographically secure, randomly generated link. This link can be considered secure as a result of that, and practically can only be accessed by people who you share the link with.
However, when you share information publicly, your content may be viewed by anyone who has a link to the given session. If you were to inadvertently disclose the exact link of a session to an unintended third-party, that third-party would be able to access the session.
Data processing on the website
Visiting the website
We (or the web space provider) collect data on each visit to our website (so-called server log files) for statistical evaluations for the purpose of optimizing our services and in order to guarantee the stability and operational security of the website.
| DATA | PURPOSE | LEGAL BASIS |
|---|---|---|
| name of the website visited, file, date and time of the visit, data amount transferred, information on a successful call, browser type as well as version, operating system of the user, referrer URL (the page visited before), IP address and the requesting provider as well as the following, if a mobile end device is being used: country code, language, name of device, name of operating system and version | optimizing our services and in order to guarantee the stability and operational security of the website | Art. 6 para. 1 s.1 lit. f. GDPR based on our legitimate interest of quality assurance |
| name of the website visited, file, date and time of the visit, data amount transferred, information on a successful call, browser type as well as version, operating system of the user, referrer URL (the page visited before), IP address and the requesting provider as well as the following, if a mobile end device is being used: country code, language, name of device, name of operating system and version | compliance with legal obligations | Art. 6 para. 1 s.1 lit. c. GDPR |
Cookies
Our website partly uses so-called technical cookies for a user friendly and technical adequate presentation of the website. Cookies are small text files which are stored on your device and in your browser.
We use so-called session cookies. After the end of the session these cookies will be deleted automatically. The session cookies are used in order to associate successive page requests with the individual users, who at the same time access our website. Other cookies will be stored on your device until you delete them. These cookies enable us to recognize your browser during your next visit. We also use third party cookies for different purposes, including marketing. For details please refer to the following section and the list of third party cookies and providers used by us (see table above).
OPT-OUT: You can adjust your browser to notify you, before you receive a cookie or to decide to accept cookies on a case-by-case basis, to completely or partly exclude all incoming cookies and to activate the deletion of cookies automatically when the browser is closed. You may manage many online advertisement cookies provided by companies via the American web page http://www.aboutads.info/choices/ or the web page of the European Union http://www.youronlinechoices.com/uk/your-ad-choices/ . We would like to inform you that the usage and especially the convenience of usage without using any cookies may be limited.
In the event personal data are processed such processing is based on Art. 6 para. 1 s.1 lit. f. GDPR with our legitimate interest of the presentation of a user friendly and technical correct website, or, where required, your consent (legal basis Art. 6 para. 1 s.1 lit. a. GDPR).
Third party cookies, similar technologies and other third party services on the website
This website uses third party cookies and similar technologies. Some of these third party cookies and similar technologies are necessary for our online service (category "necessary"), some are needed for improving the functionality of our online services (category: "functional") and some are used by us for marketing purposes (category "marketing"). Details about the third party cookies, similar technologies as well as other third party services used on our website are set out in the tables below.
List of third party providers
| NAME | TYPE OF DATA | PURPOSE | LEGAL BASIS | APPLICABLE SAFEGUARDS |
|---|---|---|---|---|
| Auth0 (by Auth0, Inc., 10800 NE 8th Street, Suite 700, Bellevue, WA 98004, USA) | Email address, User ID | User Authentication | Art. 6 para. 1 s.1 lit. b. GDPR | Privacy Shield / EU Standard Contractual Clauses |
| Google Analytics by Google (inter alia Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, Mountain View, CA, USA) | Usage data, User ID, Anonymized IP Address | Analytics, Improving User Experience | Art. 6 para. 1 s.1 lit. f. GDPR | Data are only processed on servers in the EU/EEA. |
| Brevo (SENDINBLUE — 106 boulevard Haussmann, 75008 Paris, France) | Email Address, Name | Email delivery, Onboarding, CRM | Art. 6 para. 1 s.1 lit. f. GDPR | Privacy Shield / EU Standard Contractual Clauses |
| Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta | Usage data, User ID, Anonymized IP Address | Analytics, Improving User Experience | Art. 6 para. 1 s.1 lit. f. GDPR | Data are only processed on servers in the EU/EEA. |
| New Relic International Limited (New Relic EU Representative), 31-36 Golden Lane, Dublin 8, Ireland | Usage data, User ID, Anonymized IP Address | Analytics services for application performance metrics and error reporting for the Product operation. | Art. 6 para. 1 s.1 lit. f. GDPR | Data are only processed on servers in the EU/EEA. |
| Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg, ATTN: AWS EMEA Legal | User Id, Anonymized IP Address | Application hosting and CDN services | Art. 6 para. 1 s.1 lit. f. GDPR | Data are only processed on servers in the EU/EEA. |
| Microsoft Clarity (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) | Usage data, User ID, Anonymized IP Address | Analytics, Improving User Experience | Art. 6 para. 1 s.1 lit. f. GDPR | Please refer to Microsoft’s privacy statement . |
| OpenAI (by OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110, USA) | Hostname (device name), ID (internal device ID), Operating system & version, NetBird version, Cloud (AWS, GCP, Azure, etc.), Platform (Docker, Kubernetes, OpenStack), UserDevice (true/false) | Support Beta AI features, Improving User Experience | Art. 6 para. 1 s.1 lit. f. GDPR | No personal data is shared. |
List of third party cookies and similar tools
| NAME | PURPOSE | PROVIDER |
|---|---|---|
| auth0 | Authentication | Auth0 (by Auth0, Inc., 10800 NE 8th Street, Suite 700, Bellevue, WA 98004, USA) |
| auth0_compat | Authentication | Auth0 (by Auth0, Inc., 10800 NE 8th Street, Suite 700, Bellevue, WA 98004, USA) |
| did_compat | Anomaly Detection | Auth0 (by Auth0, Inc., 10800 NE 8th Street, Suite 700, Bellevue, WA 98004, USA) |
| did | Attack Protection | Auth0 (by Auth0, Inc., 10800 NE 8th Street, Suite 700, Bellevue, WA 98004, USA) |
| _gid | Analytics, Improving User Experience | Google Analytics by Google (inter alia Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, Mountain View, CA, USA) |
| _ga | Analytics, Improving User Experience | Google Analytics by Google (inter alia Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, Mountain View, CA, USA) |
| _hjSessionUser{site_id} | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjSession{site_id} | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjClosedSurveyInvites | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjDonePolls | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjMinimizedPolls | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjShownFeedbackMessage | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjSessionTooLarge | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjSessionRejected | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjSessionResumed | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjid | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjRecordingLastActivity | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjTLDTest | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjUserAttributesHash | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjCachedUserAttributes | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjLocalStorageTest | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjIncludedInPageviewSample | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjIncludedInSessionSample | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjAbsoluteSessionInProgress | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjFirstSeen | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjViewportId | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _hjRecordingEnabled | Analytics, Improving User Experience | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta |
| _clck | Persists the Clarity User ID and preferences, unique to that site is attributed to the same user ID. | Clarity by Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) |
| _clsk | Connects multiple page views by a user into a single Clarity session recording. | Clarity by Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) |
| CLID | Identifies the first-time Clarity saw this user on any site using Clarity. | Clarity by Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) |
| ANONCHK | Indicates whether MUID is transferred to ANID, a cookie used for advertising. Clarity doesn't use ANID and so this is always set to 0. | Clarity by Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) |
| MR | Indicates whether to refresh MUID. | Clarity by Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) |
| MUID | Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. | Clarity by Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) |
| SM | Used in synchronizing the MUID across Microsoft domains. | Clarity by Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) |
Microsoft Clarity
We improve our products and advertising by using Microsoft Clarity to see how you use our website. By giving us your consent, you agree that we and Microsoft can collect and use this data. We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement .
OpenAI
We are currently employing OpenAI for certain automation processes related to a NetBird feature that is undergoing beta testing. This feature leverages AI-driven processes to enhance specific aspects of our service. However, we cannot disclose the details of this feature at this time.
Please be assured that no personal data is transmitted to OpenAI. There is no information shared with OpenAI unless the user decides to use the smart features, and in that case the information shared with OpenAI is strictly anonymized or non-personal and is utilized solely for the purpose of improving our product’s functionality and ensuring an optimal user experience during the beta phase. For further details on OpenAI’s privacy and data handling practices, please refer to their OpenAI Privacy Policy .
Contacting us, newsletters
Contacting us; emails
If you send us any requests via email or otherwise contact us your details in this request are processed by us as follows:
| DATA | PURPOSE | LEGAL BASIS |
|---|---|---|
| contact data, name, email address and other data provided | deal with your inquiry or to be able to contact you at a later time for follow up questions | Art. 6 para. 1 s.1 lit. a GDPR, Art. 6 para. 1 s.1 lit. b GDPR |
Newsletter
With the email newsletter we inform you about our products and services. For the registration to the newsletter only the email address is needed. If you register for the newsletter, your email address will be transmitted to us (or to the engaged third party provider) and stored there. After registration, you receive an email to confirm the registration ("double opt-in").
| DATA | PURPOSE | LEGAL BASIS |
|---|---|---|
| email address, IP address, the device name, the mail provider as well as (optional) the first and last name and the date of the registration | registration of the newsletter, this storage serves solely as proof in the event that a third party misuses an email address and registers for receiving the newsletter without the knowledge of the authorized party | Art. 6 para. 1 s.1 lit. a GDPR |
| email address, IP address, the device name, the mail provider as well as (optional) the first and last name and the date of the registration | Sending newsletters based on your consent | Art. 6 para. 1 s.1 lit. a GDPR |
| email address, IP address, the device name, the mail provider as well as (optional) the first and last name and the date of the registration | Sending newsletters based on an existing relationship with you | Art. 6 para. 1 s.1 lit. b GDPR, Section 7 para. 3 German Unfair Competition Act (UWG) |
| IP address, browser type and operating system | analyze the behavior, such as whether users open the email sent or click certain links in emails (when the newsletter is opened, the contained information (so-called web-beacon) connects to the servers of Mailchimp/Hubspot in order to analyze the behavior)for such data processing our legitimate interests (or the legitimate interests of third parties) in quality assurance or marketing apply | Art. 6 para. 1 s.1 lit. f GDPR |
We use third party providers for the purpose of sending newsletters. For this purpose, the service may process the IP address, device name, mail provider, first and last name and date on servers in the USA. For more information please also refer to the list of third party providers set out here (see table below).
Withdrawal of consent / OPT-OUT: You can withdraw their consent to the processing of Data for the purpose of sending the newsletter or evaluation of related data at any time. The withdrawal can take place over a link, which is contained in each newsletter, or by separate message to us. You will not incur any costs other than the transmission costs according to the basic tariffs.