Dew Privacy Policy

Effective date: 24 October 2026

This Privacy Policy explains how Trinode ApS processes personal data in connection with the Dew website, desktop app downloads, paid Dew subscriptions and trials, license validation, the update check, and customer support.

A central principle of Dew is that the product is self-hosted. Customer files, Dew user accounts, configuration, sharing links, and access logs remain within infrastructure selected and operated by the customer.

1. Data controller

For the processing described in this Privacy Policy, the relevant data controller is:

Trinode ApS
Kaersangervej 6
DK-8300 Odder
Denmark
CVR: DK46248333

Privacy contact: privacy@getdew.io
General contact: contact@getdew.io

2. The Dew website

The Dew website, getdew.io, is designed to collect as little information as reasonably possible.

The website does not use:

  • Product analytics
  • Advertising trackers
  • Tracking cookies
  • Third-party analytics scripts

The website is delivered and protected using Cloudflare.

Cloudflare may process standard technical request data such as:

  • IP address
  • Browser and user-agent information
  • Request metadata
  • Security-related information

This processing is used to deliver, secure, and protect the website.

Desktop app downloads

Dew desktop app downloads are served by Keygen, a third-party service operated from the United States. When you download a desktop app, Keygen receives the same kind of technical request data, such as IP address, browser and user-agent information, and request metadata, to deliver the download.

3. The self-hosted Dew product

Dew is self-hosted.

The following data remains within infrastructure configured and controlled by the customer:

  • Files and folders
  • Dew user accounts
  • Recipient information
  • Configuration
  • Sharing links
  • Access logs
  • Audit logs
  • Domain settings
  • Storage configuration
  • Authentication configuration

Trinode does not receive or centrally host customer files merely because the customer uses Dew.

Update check

Released versions of the Dew server ask getdew.io once a day whether a newer version is available. The request contains the server’s Dew version and, as part of any request, its IP address. The first request after a new server is set up also marks it as a new installation, so Trinode can count installations. Trinode keeps only the number of requests and new installations per day and version, not IP addresses. getdew.io is delivered by Cloudflare, which processes the request data as described in section 2.

An administrator can turn the daily check off.

Public IP address lookup

When an administrator sets up a domain, the Dew server asks Cloudflare for its own public IP address, so the setup can show the DNS record to create. Cloudflare receives the server’s IP address as part of the request. Trinode does not receive this request.

4. License validation

The Free plan does not require a license key. An installation without a license key does not contact the licensing service. If a license ends and its key stays installed, Dew keeps checking the key until an administrator removes it.

When an administrator activates a Pro or Enterprise license or trial, Dew uses Keygen for license activation and validation.

Dew normally revalidates a paid license approximately every 24 hours.

License activation and validation requests contain:

  • The license key
  • A random installation identifier generated when Dew is first set up
  • The server’s hostname, operating system, processor architecture and number of processor cores, sent when the license is activated on a server
  • The server’s IP address and a user agent naming the licensing library and platform, as part of every request

These requests do not include customer files, shared content, Dew user content, or operational audit data.

Keygen is a third-party licensing service operated from the United States. See section 11 for how this transfer is safeguarded.

5. Purchases

Paid Dew subscriptions are sold through Paddle.com, which acts as Merchant of Record.

Paddle processes information necessary to complete and administer purchases, which may include:

  • Name
  • Company name
  • Billing address
  • Email address
  • Payment information
  • Tax information
  • Subscription information
  • Transaction records

Paddle independently processes payment and billing data under its own terms and privacy notices.

Trinode may receive limited customer and subscription information from Paddle where necessary to:

  • Fulfil the subscription
  • Associate a purchase with a Dew license
  • Provide support
  • Manage renewals or cancellations
  • Handle refunds
  • Maintain commercial and accounting records
  • Prevent fraud or misuse

Trinode does not receive full payment-card details from Paddle.

6. Support

If you contact Dew support, Trinode processes the correspondence and any information you choose to provide.

This may include:

  • Name
  • Email address
  • Company information
  • Technical information
  • Log extracts
  • Screenshots
  • Configuration information
  • Files or other material you voluntarily send to support

Support information is used to investigate and respond to your request.

Customers should avoid sending confidential or personal information that is not necessary for support.

When support material contains personal data for which the customer is controller, such as users or recipients in its logs, Trinode processes it as the customer’s processor under the Dew Data Processing Agreement.

Where the GDPR applies, Trinode relies on these legal bases:

Purpose Legal basis
Delivering and securing the website (section 2) Legitimate interests (Article 6(1)(f)): running a secure website
Serving desktop app downloads (section 2) Legitimate interests (Article 6(1)(f)): delivering the software people request
Update check (section 3) Legitimate interests (Article 6(1)(f)): telling administrators about new versions, including security fixes, and counting installations
License activation and validation (section 4) Contract (Article 6(1)(b)) with the customer. For people acting for an organization, legitimate interests (Article 6(1)(f)) in performing that contract
Subscription records received from Paddle (section 5) Contract (Article 6(1)(b)), and legitimate interests (Article 6(1)(f)) in preventing fraud and misuse
Accounting and tax records Legal obligation (Article 6(1)(c)) under Danish bookkeeping and tax law
Support (section 6) Contract (Article 6(1)(b)) for paying customers; legitimate interests (Article 6(1)(f)) in answering other enquiries
Establishing, exercising or defending legal claims Legitimate interests (Article 6(1)(f))

Where Trinode relies on legitimate interests, you can object to the processing (section 12).

8. Data retention

Data Retention
Accounting and billing records 5 years from the end of the financial year they relate to, as required by the Danish Bookkeeping Act
Subscription and license records While the subscription is active, then 3 years, the general Danish limitation period for claims
Support correspondence While the customer relationship lasts, then 3 years. Customer data in support material is deleted sooner, under the Dew Data Processing Agreement (section 6).
Website and download request data Trinode does not keep this data. Cloudflare and Keygen keep it under their own retention policies.

9. Security

Trinode applies appropriate technical and organizational measures to protect personal data processed by us.

Because Dew is self-hosted, the customer is responsible for securing the infrastructure Dew runs on, as set out in the Dew Terms & Conditions.

10. Customer responsibilities as data controller

Organizations using Dew may process personal data about their own employees, customers, partners, recipients, or other individuals.

In those situations, the Dew customer determines how that personal data is processed inside its own Dew installation.

The customer is therefore responsible for determining its own obligations under GDPR and other applicable privacy laws for data processed in its self-hosted Dew environment.

Because customer files and user data remain within customer-controlled infrastructure, Trinode does not automatically become a processor of that data merely because Dew software is being used. The exception is support material the customer sends to Trinode, covered by the Dew Data Processing Agreement (section 6).

The same applies to services the customer connects Dew to, such as storage, email, SMS or identity providers. The customer chooses them, and they process data under the customer’s own arrangements with them.

11. International transfers

Three service providers used by Trinode are based in the United States:

  • Cloudflare, Inc. delivers and protects the website (section 2). Transfers are covered by Cloudflare’s certification under the EU-U.S. Data Privacy Framework, with the EU Standard Contractual Clauses as a fallback, under Cloudflare’s Data Processing Addendum.
  • Keygen LLC serves desktop app downloads (section 2) and handles license activation and validation (section 4). Keygen stores this data in the United States. Transfers are covered by the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914), which are part of Keygen’s terms of service.
  • Microsoft hosts Trinode’s email, including support correspondence (section 6). Microsoft stores this data in the EU under its EU Data Boundary. Any transfer to the United States is covered by Microsoft’s certification under the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses in Microsoft’s Data Protection Addendum.

Paddle processes purchase data as an independent controller and Merchant of Record (section 5), and handles its own international transfers as described in its privacy notice.

To request a copy of the safeguards that apply, contact privacy@getdew.io.

12. Your rights

Where the GDPR applies, you may have rights including:

  • The right to access your personal data
  • The right to correct inaccurate information
  • The right to request deletion
  • The right to restrict processing
  • The right to object to certain processing
  • The right to data portability
  • The right to withdraw consent where processing is based on consent
  • The right to lodge a complaint with a supervisory authority

These rights may be subject to legal exceptions.

To exercise your rights, contact:

privacy@getdew.io

13. Complaints

If you are located in Denmark, you may lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

You may also have the right to complain to the competent data-protection authority in another EU or EEA country.

14. Changes to this Privacy Policy

We may update this Privacy Policy when Dew, our service providers, or applicable legal requirements change.

The current version will be published on getdew.io with an updated effective date.

15. Contact

For privacy questions or requests:

Trinode ApS
Kaersangervej 6
DK-8300 Odder
Denmark
CVR: DK46248333

Privacy: privacy@getdew.io
General contact: contact@getdew.io
Support: support@getdew.io