Privacy policy

As of: October 2026

1. Controller

GEYRA Cyber Defense
Owner: Torsten Schenk
Uhlandstraße 12
15370 Fredersdorf-Vogelsdorf
Germany
Email: info@geyra.de

2. Principles

We only process personal data insofar as this is necessary for the website, the provision of GEYRA, contract processing, communication with you or the security of our systems. GEYRA does not read messages, emails or conversations and does not capture passwords from your network traffic. This also applies to the optional traffic monitoring (section 10b) and the automatic defence (sections 10d and 10e): they only analyse data volumes and destinations, never content. The password of your FRITZ!Box that you enter in GEYRA is stored on your PC in the Windows Credential Manager. It is only transmitted to the GEYRA server if you expressly set up the access for Guardian or the automatic defence “even when the PC is off” in the GEYRA app (Way 2, section 10e); there it is stored encrypted (AES-256) and used exclusively for your household.

3. Visiting the website

When you visit geyra.de, technically necessary data is processed: IP address, time, page accessed, browser and operating system. This serves the delivery, stability and security of the website. The legal basis is Art. 6(1)(f) GDPR.

On the “Router check” page, geyra.de determines your internet provider once from your IP address (via the public name of the address) in order to show you the matching routers. The IP address and the provider are not stored for this purpose. geyra.de loads the list of supported routers from the GEYRA server; no data about you is transmitted in the process. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract).

4. Hosting

geyra.de is operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS processes the data under section 3 on our behalf. Server logs are deleted automatically by the hosting provider after a short time.

5. Contact

If you write to us, we process your details in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if it concerns your contract, otherwise Art. 6(1)(f) GDPR.

If you cancel or withdraw using the forms on geyra.de, we process your details (name, email address, contract details, time of receipt) to implement the cancellation or withdrawal and to confirm receipt to you. As Link is the seller of the Guardian subscription, we pass the necessary details on to Link or Stripe and implement the cancellation or withdrawal there (ending the subscription, initiating the refund). We keep the receipt as proof. The legal basis is Art. 6(1)(b) and (c) GDPR and, for forwarding to Link or Stripe, Art. 6(1)(f) GDPR; our legitimate interest is to implement your withdrawal or cancellation simply, quickly and verifiably.

6. Registration, Guardian subscription and customer administration

Registration without purchase: You use GEYRA for free; neither a purchase nor an email address is needed. At the first start GEYRA registers your household automatically with the GEYRA server. For this the GEYRA server stores the GEYRA ID of your household and, per device, the public device key (so that every message can be checked for its digital signature), the platform (Windows or Android), the program version, the time of registration and of the last connection, for the alarm phone also the device name (for example “Galaxy S24 Ultra”) and a device hint (a checksum used only to recognise the same phone when it is paired again), as well as a check value (hash) of your recovery key – never the key itself. The GEYRA server also stores the list of devices you have marked as “known” on the PC or on the alarm phone (MAC address, name, manufacturer or type, time and whether the marking was made on the PC or on the phone), so that these devices count as known on the PC, the server and the alarm phone alike. To protect against mass registrations, the GEYRA server counts how many households are registered per IP address within an hour; for this the IP address is only held in memory and discarded after one hour at the latest. The legal basis is Art. 6(1)(b) GDPR, for abuse protection Art. 6(1)(f) GDPR. Households using GEYRA for free that have had no contact with the GEYRA server for 12 months are deleted (section 12).

Guardian subscription: Only the Guardian subscription is paid for. For this we process name, email address, chosen plan, payment status, start and end of the subscription, the assignment to your GEYRA ID and information from support requests. If you book Guardian in GEYRA, the payment link contains a one-time purchase identifier of your household; with it the GEYRA server links the payment directly to your household. If you book Guardian on geyra.de, you receive a Guardian code that you enter in GEYRA. The GEYRA server issues the Guardian code or the confirmation as soon as Stripe has confirmed the payment to it; for this geyra.de only transmits the purchase number of the payment process to the GEYRA server. For your household the GEYRA server stores the Guardian code, the subscription number at Stripe and the state of Guardian (for example active, payment failed, ended), but no email address, no name and no payment data. The legal basis is Art. 6(1)(b) GDPR. We keep invoice-relevant data as long as commercial and tax law require (up to ten years).

7. Purchase and payment via Link (Stripe)

Purchase and payment of the Guardian subscription are handled by Link, a service of the Stripe group. Link acts as the seller for the purchase and processes the purchase data under its own responsibility, in particular name, email address, billing address, payment data and technical data for fraud prevention. You enter your payment data directly in the payment window; we ourselves do not receive complete card or account data. From Stripe we receive the information we need for your Guardian subscription: name, email address, country, plan and payment status. Stripe may also transfer data to Stripe, Inc. in the USA; it is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(b) GDPR. More: link.com/privacy and stripe.com/de/privacy.

8. GEYRA ID

The GEYRA ID assigns your GEYRA installation to your household. It is assigned automatically at the first start. It belongs to your household, not to a single PC, smartphone, router or IP address.

9. Data from your home network

For protection, GEYRA processes technical data of the devices in your home network: device names, device type, manufacturer, MAC and IP addresses, reachability, changes compared to the usual state and GEYRA's assessments. This data is not combined into personal profiles and is not used for advertising. For you as the customer, the legal basis is Art. 6(1)(b) GDPR.

Housemates and guests: GEYRA protects your entire home network and therefore also the devices of other people who use it, for example family members, housemates or guests. For their data the legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in protecting the home network and all devices used in it against attacks, malware and unauthorised access; the GDPR expressly recognises network security as a legitimate interest (Recital 49). For this we only process technical device data, no content. Please inform the people who regularly use your home network that GEYRA is in use; you can show them this privacy policy for that purpose.

10. Processing on your PC and on the GEYRA server

GEYRA detects the devices in your home network on your PC. Only the data required for assessment and alerting is transmitted to the GEYRA server. Each household's data is stored on the server separately from all other households. The connection is encrypted (HTTPS), and every message is additionally digitally signed and verified.

So that GEYRA protects your home network with Guardian even when the PC is off, the GEYRA server reads your router via an encrypted connection (HTTPS with a fixed certificate or WireGuard). Where your router allows it, GEYRA creates its own login with restricted rights for this purpose (for example with FRITZ!Box and MikroTik); your own router password then stays on your PC, unless you set up the automatic defence even when the PC is off (section 10e). If the router does not allow its own login, the GEYRA server stores the router access encrypted (AES-256) and uses it exclusively for your household. Through this connection the GEYRA server only reaches your router's administration, not your devices. Before every change to your router, GEYRA shows you what will be set up and asks for your consent. “Disconnect GEYRA from router” removes the access and all GEYRA settings again.

Only at the push of a button does GEYRA send a diagnostic report (router model, firmware, errors; no passwords) or – for routers that are being added – a router capture: the pages of your router that can be accessed without a password, without passwords and session data. Both serve exclusively to improve GEYRA for your router and are deleted after twelve months at the latest. The legal basis is Art. 6(1)(b) GDPR.

10a. Quarantine for new devices (optional)

If you switch on the “Quarantine” rule in GEYRA, GEYRA automatically disconnects devices that newly appear in your home network from the internet via your router and notifies you – without Guardian via GEYRA on your PC while it is running, with Guardian also via the GEYRA server. This only happens after you have read the explanation in GEYRA, confirmed this with a tick and expressly switched on the rule. For this we store the time of your consent and, for each device handled, MAC address, device name, IP address, time and result. Every block and release is kept in your household's block log for 90 days and then deleted. The legal basis is Art. 6(1)(b) GDPR (performance of the contract at your request). You can switch off the rule at any time.

10b. Traffic monitoring (optional)

With traffic monitoring, GEYRA detects when a device in your home network sends or receives an unusually large amount of data or contacts a known malicious destination on the internet, and warns you on your alarm phone. Traffic monitoring is optional and initially switched off. You switch it on yourself in GEYRA on your PC under “Schutz & System” (protection & system) with “Verkehr überwachen” (monitor traffic). Beforehand GEYRA explains in a window what is analysed, and the function only starts once you consent there. It only works with supported routers.

What is analysed: per device the identifier (MAC and IP address), the data volumes sent and received per minute, the contacted destinations (IP addresses and names, for example “example.com”) and the time. For this GEYRA uses the capture function of your router: when the PC is on via GEYRA on your PC, when the PC is off via the GEYRA server, if you have set this up under section 10e. The GEYRA server only requests the beginning of each data packet (at most 96 bytes with address and protocol information). The capture is immediately turned into entries “device – destination – data volume – time”. The content of communication (messages, emails, website content, conversations) is not read and not stored. The captures themselves are only analysed in memory and never stored as a file.

How it is analysed: The entries are transmitted to the GEYRA server in encrypted form or are created there. There GEYRA compares the data volumes with the usual normal state of each device and the destinations with a list of known malicious networks and addresses. GEYRA downloads this list from public security sources (for example Spamhaus DROP); none of your data is transmitted to these sources. You receive an alarm on your alarm phone if there is a match or evidence of an attack (for example a device sending a lot of data to destinations it has never used before). Large data volumes without such evidence – such as downloads, updates, backups or streaming – are not reported to the alarm phone; they only appear as information in GEYRA on the PC.

Storage period: Observations are automatically deleted on the GEYRA server after 48 hours. In addition, the usual normal state per device (typical data volumes) is stored permanently, until you switch off traffic monitoring or your contract ends. Alarms, like all alarms, are deleted after at most seven days.

Evidence preservation for alarms: When GEYRA raises an alarm, the GEYRA server stores the related observations separately so that the incident can be traced and explained to you: for an alarm about a specific device (for example a new device, quarantine, contact with a known malicious destination) the observations of this device from the last 48 hours; for an alarm without a specific device (for example unusually high total traffic) the observations of all devices from the last six hours. The evidence is kept only with your household, is not used for shared learning (section 10c) and is deleted after 90 days.

Legal basis: For you as the customer, your consent (Art. 6(1)(a) GDPR). For the devices of other people in your home network, the legitimate interest in protecting the network (Art. 6(1)(f) GDPR, see section 9). You can withdraw your consent at any time by switching off “Verkehr überwachen” (monitor traffic); processing carried out until then remains lawful. Once switched off, no new observations are recorded, and the stored observations and evidence of your household are deleted immediately. The alarm log is kept until its period expires (section 12).

10c. Shared learning to protect all customers

If GEYRA detects a malicious destination or an attack pattern in one household, GEYRA uses this finding to warn all customers more quickly. For this the finding (for example the malicious address and the type of incident) is stored without names, email addresses or device names; your household only appears in it as an identifier that cannot be traced back (HMAC). These entries are deleted after twelve months. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protecting all customers against known attacks.

10d. Automatic defence (optional)

With the automatic defence, GEYRA independently disconnects a suspicious device in your home network from the internet via your router – for example a camera that contacts a known attacker destination. The automatic defence is optional and switched off at first. You switch it on yourself in GEYRA on the PC in the rules of the GUARDIAN protection level; this is only possible in the GUARDIAN protection level and only with the Guardian subscription. Beforehand, GEYRA explains in an assistant what happens, and the defence only starts once you expressly consent there. If you leave the GUARDIAN protection level, the automatic defence is switched off.

When GEYRA disconnects: immediately when a device contacts a known malicious destination (section 10b). In the event of an unusual spike in data traffic, GEYRA only disconnects devices that have already been identified as malicious or that are unknown to your household. Known devices are never disconnected because of a large data volume; you then only receive an alarm. GEYRA never disconnects FRITZ! devices (for example FRITZ!Box and FRITZ!Repeater), and at most three devices are blocked per hour.

What is stored: the time of your consent and of your decision and, for each block, the device (MAC address, device name, IP address), the time and the result in your household's block log (storage period see section 12). You receive an alarm for every block and can release the device again at any time on the alarm phone or in GEYRA on the PC.

Legal basis: Art. 6(1)(b) GDPR (performance of the contract at your request); for the devices of other people in your home network Art. 6(1)(f) GDPR (section 9). You can switch off the automatic defence at any time.

10e. Guardian and automatic defence even when the PC is off – access from the internet to your FRITZ!Box (optional)

Guardian requires Way 2: after you book Guardian, GEYRA sets up this access with you in an assistant. In the assistant of the automatic defence you choose between two ways:

Way 1 – with the PC only: The defence runs via GEYRA on your PC. Nothing additional is changed on your FRITZ!Box for this.

Way 2 – even when the PC is off: The GEYRA server takes over the defence around the clock. For this, GEYRA intervenes deeply in your FRITZ!Box. Way 2 is currently available for the FRITZ!Box. In detail:

• For your FRITZ!Box user with administrator rights, GEYRA ticks the box “Zugang auch aus dem Internet erlaubt” (access from the internet also allowed). This user thereby also receives from the internet the rights that it previously only had in your home network.
• The FRITZ!Box requires a confirmation on the box itself for this (two-factor confirmation, for example pressing a button on the FRITZ!Box). Only you carry out this confirmation. GEYRA has no access to your two-factor confirmation.
• The FRITZ!Box only allows access from the internet with a password of your own, not with the password printed on the device. If you still use the printed password, GEYRA will, at your request, assign a new password, set it in your FRITZ!Box and show it to you.
• The GEYRA server then logs in to your FRITZ!Box with this user via an encrypted connection (HTTPS with a fixed certificate). For this, the password of this user is transmitted to the GEYRA server and stored there encrypted (AES-256) and separately from all other households.
• Via this access, the GEYRA server starts the capture of your FRITZ!Box for traffic monitoring (section 10b) when your PC is switched off or no longer delivers traffic data, and blocks and releases devices (sections 10a and 10d). The captures are only analysed in memory and never stored as a file.

Please note: With access from the internet switched on, anyone who knows the user name and password of this FRITZ!Box user can also log in to your FRITZ!Box from the internet. Therefore use a secure password, do not pass it on and keep the two-factor confirmation of your FRITZ!Box switched on.

Ending it: You can switch off access from the internet yourself at any time in your FRITZ!Box under “System” → “FRITZ!Box Users” for the user concerned; this ends the defence when the PC is off. We delete the access stored on the GEYRA server when you disconnect GEYRA from the router, at the latest 14 days after the end of Guardian. If you book Guardian again later, you set up Way 2 once more.

Legal basis: For the change to your FRITZ!Box, the GEYRA server's access to your FRITZ!Box and the storage of the password, your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG); for the defence provided in this way Art. 6(1)(b) GDPR; for the devices of other people in your home network Art. 6(1)(f) GDPR (section 9). You can withdraw your consent at any time with effect for the future; processing carried out until then remains lawful.

11. Alarm phone

A smartphone is connected to your household as an alarm phone with a one-time pairing code. Alarms are delivered at home and on the go via the GEYRA server, without Guardian only while your PC reports to the GEYRA server. For this, the following is processed: a technical key of the smartphone and an identifier derived from it, the time of pairing, the name of the smartphone (for example “Galaxy S24 Ultra”) and the content of the alarms (for example name and address of a newly detected device). Alarms are kept on the server for at most seven days. The GEYRA server stores when the smartphone last connected to it (section 6). You can remove an alarm phone in GEYRA on the PC at any time. The legal basis is Art. 6(1)(b) GDPR.

The GEYRA app for Android is available free of charge via Google Play. The list “Devices in the home network” on the alarm phone comes from the GEYRA server, which queries your router every minute for this. No router password is stored on the smartphone.

12. Storage period

We only store personal data for as long as necessary for the respective purpose. The GEYRA server checks every hour and deletes automatically:

• traffic monitoring observations (device, destination, data volume, time) after 48 hours,
• evidence preserved for alarms (the observations belonging to an alarm, section 10b) after 90 days,
• the alarm log (incidents) after 90 days; at most the last 200 incidents are kept,
• alarms for the alarm phone after at most seven days,
• entries in the block log (which device was blocked or released when) after 90 days; only the last entry of a device that is still blocked is kept so that the block can be lifted again,
• automatic error reports and captures for error analysis after 14 days,
• diagnostic reports and router captures that you send yourself at the push of a button after twelve months at the latest,
• the encrypted access to your FRITZ!Box for Way 2 (section 10e) 14 days after the end of Guardian; if you book Guardian again, you set up Way 2 once more,
• households using GEYRA for free (without Guardian) that have had no contact with the GEYRA server for 12 months – no PC and no alarm phone of the household has reported in this time – with all data of the household.

On this website the following is deleted:

• records of withdrawals and cancellations (name, email address, contract details, time of receipt) after three years; we need them for that long to be able to prove receipt in case of queries (regular limitation period),
• the confirmations you gave in GEYRA when booking from GEYRA (time, plan, language, program version) after 30 days if no purchase is made; with a purchase they are kept together with the purchase.

Captures that the GEYRA server retrieves from your FRITZ!Box for traffic monitoring are not stored but only analysed in memory. If you switch off “Verkehr überwachen” (monitor traffic), we immediately delete your household's observations and evidence. The access to your router (sections 10 and 10e) remains stored until you disconnect GEYRA from the router; the access for Way 2 is also deleted 14 days after the end of Guardian. If Guardian ends, you keep using GEYRA for free; the other data of your household is not deleted. We delete inactive households using GEYRA for free after 12 months without any contact, and at your request at any time (section 17), unless there is a statutory retention obligation.

13. Recipients

The only recipients of your data are service providers we need for operation: IONOS SE (Elgendorfer Straße 57, 56410 Montabaur, Germany) as hosting provider of the website and operator of the GEYRA server; the servers are located in data centres in the EU, currently in Spain. No transfer to countries outside the EU takes place for this. Further recipients are Link and Stripe for purchase and payment and for implementing cancellations and withdrawals that you declare via geyra.de. The service providers process the data on our behalf and according to our instructions, unless, like Link and Stripe, they act under their own responsibility. We do not sell any data.

14. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time with effect for the future. To do so, write to info@geyra.de. You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection of Brandenburg.

15. Security

We protect your data with encryption, a digital signature on every message, separate storage per household and access restrictions on our servers. Router access data is stored encrypted (AES-256) per household.

16. Changes

We adapt this privacy policy when GEYRA, the website or the service providers used change.

17. Having your data deleted (GEYRA app and GEYRA server)

How to request deletion of your data:

1. Write an email to info@geyra.de – if you booked Guardian, preferably from the email address of your purchase – and state your GEYRA ID (for example GEYRA-000123).
2. We delete your household's data on the GEYRA server within 30 days and confirm the deletion to you by email.

From GEYRA for Windows version 2.0.188 you can also delete your household yourself: in GEYRA on the PC with the button “Delete household”. The GEYRA server then deletes your household’s data without the detour via an email.

The following is deleted: the device list of your home network (device names, manufacturers, MAC and IP addresses), paired alarm phones and PCs, the list of devices marked as “known”, alarms, the alarm log, error reports, captures, the block log, the observations, evidence and learned normal state of traffic monitoring, and the stored access to your router including the encrypted password. Only invoices and payment receipts are kept, insofar as required by law (up to ten years).

You can remove a single alarm phone yourself: in GEYRA on the PC under “MANAGE ALARM PHONE” or in the app with “NEU KOPPELN” (pair again). Data that is only stored on the smartphone is deleted when you uninstall the app. Irrespective of this, the automatic deletion periods from section 12 apply.