Klyport is local-first and GDPR-first. This explains exactly what we collect, why, the legal basis for it, and the rights you have — in plain language.
KLYPORTis a desktop application and accompanying website (“klyport.com”) operated by Klyport Labs (“Klyport”, “we”, “us”). For the purposes of the EU/UK General Data Protection Regulation (“GDPR”), Klyport Labs is the data controller for the limited personal data described in this policy.
If you have any question about this policy or how we handle your data, contact us at [email protected].
Klyport is built local-first. The core of what the app does — indexing your game library, reading folders, organising saves, transferring files to your own devices — happens entirely on your computer and over your own local network. That activity does not send your library, files, saves or device contents to us.
This policy applies to:
It does not cover third-party services you connect to Klyport (such as Steam, PlayStation Network or Xbox), or third-party devices you transfer files to — those are governed by their own terms and privacy policies. See §12.
When you buy Klyport Plus, payment is handled by our payment processor, Stripe. We do not see or store your full card details. We receive a limited record needed to provision and support your license — your email, a license key, the product/plan, country (for tax), and the last four digits / card type.
To do its job, the desktop app reads and indexes data on your machine: your game library and playtime, folder trees, file names, sizes and hashes, ROM/metadata, save files, and the connection settings for your devices. It also stores credentials you provide for sources you choose to connect (for example a Steam API key or a PlayStation token). This information is stored locally on your computer. We do not receive it unless you enable an optional feature that explicitly transmits it (and we tell you when that is the case).
We use the limited data above only to:
We do not sell your personal data, and we do not use it for behavioural advertising or automated decisions that produce legal or similarly significant effects about you.
If you are in the EU/EEA or UK, we process your personal data only where we have a lawful basis to do so:
| Purpose | Legal basis |
|---|---|
| Sending the newsletter | Consent (Art. 6(1)(a)) — withdrawable at any time via unsubscribe |
| Providing your Plus license & purchase support | Performance of a contract (Art. 6(1)(b)) |
| Answering support requests | Performance of a contract / our legitimate interest in helping users (Art. 6(1)(b)/(f)) |
| Security, fraud prevention & keeping the service running | Legitimate interests (Art. 6(1)(f)) |
| Tax, accounting & responding to lawful requests | Legal obligation (Art. 6(1)(c)) |
| Optional diagnostics (if you ever opt in) | Consent (Art. 6(1)(a)) |
Where we rely on legitimate interests, we have weighed them against your rights and freedoms. You may object to that processing — see §10.
Some of our processors are located outside the EU/EEA (for example, in the United States). Where personal data is transferred outside the EU/EEA or UK, we rely on appropriate safeguards — principally the European Commission’s Standard Contractual Clauses (and the UK Addendum), together with any supplementary measures needed to give your data an essentially equivalent level of protection. You can request details of the safeguards in place by emailing [email protected].
We keep personal data only as long as we need it for the purpose it was collected, then delete or anonymise it:
If you are in the EU/EEA or UK, you have the following rights over your personal data. (We honour the substance of these rights for everyone, everywhere.)
To exercise any right, email [email protected]. We will respond within one month, free of charge in ordinary cases. We may need to verify your identity first.
We use reasonable technical and organisational measures appropriate to the risk: encryption in transit (HTTPS), access controls limiting who can reach the little data we hold, signed application builds, and reputable processors who maintain their own security programmes. Saves and other sensitive files the app manages stay on your machine by default; where the app encrypts data, it does so on your device. No method of transmission or storage is ever completely secure, so we cannot guarantee absolute security — but we keep our exposure small by collecting little in the first place.
Klyport is not directed to children. The website and purchase flow are intended for users aged 16 or older (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact [email protected] and we will delete it.
Klyport lets you connect external services (such as Steam, PlayStation Network or Xbox) and transfer files to your own devices. When you do, you interact with those third parties directly, under their terms and privacy policies — we are not responsible for their practices, and unofficial integrations may change or break without notice. Our website and blog may also link to other sites we do not control. We encourage you to read the privacy policy of any service or site you use.
We may update this policy as the product evolves or the law changes. When we do, we will revise the “Updated” date above and, for material changes, give you a more prominent notice (such as a banner on the site or an email if you are subscribed). Continuing to use Klyport after an update means you accept the revised policy.
Questions, requests or concerns about your privacy? Get in touch — we read every message.
Klyport Labs
Privacy & data requests: [email protected]
Legal notices: [email protected]
General support: [email protected]
Postal address available on request via the addresses above.
If you are in the EU/EEA or UK and believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection supervisory authority (in the EU, the authority in your country of residence; in the UK, the Information Commissioner’s Office). We would appreciate the chance to address your concern first.