No account, no cookies and no selling of data. This is what each service sees.

GUARDIANA is a program for Windows 10 and 11 that includes the services of this website, and those services can also be used from a browser. You do not have to give us your name or your email address to use it, it uses no cookies or analytics, and we do not sell or pass on data. Even so, some services need a server: the ZERO browser and Communications go through GUARDIANA servers, and some Orbit measurements query other companies, only when you ask for them. This page explains, service by service, what leaves your browser, who sees it and how long it is kept.

1. This website

The website is served from GitHub Pages, by GitHub, Inc. Like any web server, GitHub receives your IP address, the browser you use and the page you request; what it keeps is explained in its privacy statement. The pages load nothing from other companies: the typefaces, the images and the libraries are served from guardianagroup.com. The only exceptions are those in points 3 and 4, and only when you use that feature.

The website does not use cookies. In your browser’s storage it keeps the language, your Orbit and ZERO preferences and, if you use them, what points 3, 4 and 5 explain. None of that is sent to GUARDIANA. To delete it all, clear the site data for guardianagroup.com in your browser’s settings.

2. NÚCLEO

NÚCLEO works entirely in your browser: it understands what you ask without sending it to any server or to any artificial intelligence. To take you from one section to another it remembers the steps of the guide, only in that tab and for one hour at most; they may include part of what you typed, except anything that looks like an email address or a long number. The PDF and video summaries are made in your browser and are not sent to anyone.

3. Orbit and the X-ray

The map. The planet’s data is downloaded from this website and the satellites’ positions are calculated in your browser.
What any website knows about you (browser, system, language, time and screen) is read in your browser and is not sent.
“Measure from outside”. Only if you press it does your browser query IPinfo (ipinfo.io), which receives your IP address and returns your network operator and your approximate location.
“Measure routes” and “The journey of your data”. Only if you press it does your browser make about 140 brief requests to Cloudflare and to 33 Amazon Web Services regions to measure how long they take to go and come back. Those companies receive your IP address, your browser and the time, as in any visit; what they keep is explained in their privacy policies.
“Set location”. If you ask for it, your browser, with your system’s location service, works out where you are. Orbit keeps the city and the coordinates, rounded to about 100 metres, only in your browser, and “Forget” deletes them.

The results stay on the page and in the report, if you download it.

4. The ZERO browser

ZERO opens each website in an isolated browser, the “bubble”, which runs on a GUARDIANA server: the one in Nuremberg (Germany), hosted by Hetzner Online GmbH, or the one in Miami (United States), hosted by Vultr (The Constant Company, LLC). The page uses whichever responds first. Only images of the page reach your device. Websites, and the DNS service that the server uses to find them, see the server’s IP address (or that of the Tor network, if you choose it), not yours.

What the server receives. The addresses and searches you type, your clicks, movements and keystrokes (also what you type into a form, passwords included) and the text you paste. It needs this to do in the bubble what you would do in your browser. It also receives your IP address, like any connection.
For how long. Everything lives in your session’s memory and is deleted when you close the tab, after 30 minutes with the tab hidden, after 12 hours or when you press “Destroy”. The service is configured not to record the websites you visit or your IP address in any log, and that configuration is in the public code. Downloads wait in the bubble until you request them or discard them.
Searches. With Google, the search is carried out by Google from your own browser, with its Programmable Search service: Google receives what you search for, your IP address and whatever its cookies collect, under its privacy policy. The results open in the bubble; Google’s ads do not: your browser opens them. With Brave or with Tor, the search is carried out by the bubble, and Brave sees the IP address of the server or of the Tor network.
Decoys. Each bubble carries decoy data. If someone visits a decoy link, the server records the IP address and the browser of whoever visited it, to show you in your session.
In your browser. ZERO keeps what it detected and what it cut (the website, the company, its country and the time; up to 5,000 entries) to show you in NÚCLEO and in the summaries. “Delete” in NÚCLEO removes it.

5. Communications

Messages, voice notes and files are encrypted in your browser, end to end: the GUARDIANA server that carries them (the relay, in Nuremberg) cannot read them.

What the relay sees. When you open the page, your browser connects to the relay, even if you are not talking to anyone. The relay sees your IP address, the room (an identifier with no name), the times and the volume of data. It keeps no names or keys, and its code writes no logs: what it needs, it holds in memory for as long as the conversation lasts.
The encrypted mailbox. If the other person is not connected, your message (text, voice note or photo of up to 4 MB) is stored on the relay inside an envelope that only their device can open (hybrid ECDH P-256 + ML-KEM-768 agreement, AES-256-GCM, signed by your phone). The relay cannot read it; it knows the room, the random identifiers of the two phones in that room, the time and the size. It is deleted as soon as it is collected and, if not, after 7 days. Acknowledgements (“delivered”, “read”) travel the same way.
The invitation. With a 9-digit code, the conversation secret waits on the relay, locked with a key derived from the code, for 10 minutes or until it is used. Its protection depends on that code: that is why it expires quickly and works only once. In Ultra, the secret travels in the link or in the QR code and does not go through the relay.
Calls and video calls. They always go through GUARDIANA’s call servers: each person’s browser uses the one closest to it, in Nuremberg (Germany) or in Miami (United States). They see the IP addresses of the people talking, the times and the volume, not the audio or the picture, and they are configured without logs. The camera and the microphone are used only during the call and with your permission. If you change your voice or protect your image (“Blurred” or “Mosaic”), the change is made on your device before encryption: the original does not leave it.
What the other person receives. What you send them, the name you enter and the country that your browser infers from your time zone, which appears on the files and on the receipt.
In your browser. Your identity (keys that do not leave it) and your name; the messages, stored encrypted, and the received files, unencrypted, until you press “End”, which deletes them here and requests their deletion on the other device. Your identity and your name stay until you clear the site data.
In the Ultra version, coming soon, the delivery receipt will be signed by both browsers; it will carry the names, the countries, the times and the fingerprints of the files, and it will be downloaded to your device: it will not be stored on any server.

6. X-rays, Fines and the other pages

They are pages for reading: they request nothing from anyone beyond what point 1 explains.

7. If you write to us

If you write to hola@guardianagroup.com, we keep that email to answer you and for nothing else. It is deleted a year after the last reply, or sooner if you ask.

8. What we do not do

We do not sell or pass on data. There is no advertising, no analytics, no accounts and no profiles of the people who use the website. Today nothing is charged on the website, so we do not process payment data.

9. Your rights, legal basis and complaints

You can ask us to tell you what data of yours we hold, to correct it or to delete it, by writing to hola@guardianagroup.com. Almost everything that points 2 to 5 explain lives only in your browser or in the memory of a session that has already ended, so it does not exist anywhere we could look for it. We process your email because you wrote to us (your consent, which you can withdraw whenever you want) and connection data because it is needed to provide the service you request. The ZERO and Communications servers are in Germany and in the United States (Miami); GitHub, which serves the website, is in the United States. If you believe we are mishandling your data, you can complain to the Superintendencia de Industria y Comercio (Colombia), the ANPD (Brazil), the AEPD (Spain) or your country’s data protection authority; before that, write to us and we will resolve it. Data controller: GUARDIANA GROUP S.A.S. (NIT 902.119.954-6), Torre Empresarial PRODEGI, Carrera 3 # 9-30, 18th floor, Bocagrande, Cartagena de Indias, Colombia.

10. Annex: the desktop program and the launch list

The GUARDIANA program for Windows and macOS and the GUARDIANA ZERO browser for Windows are no longer sold. The program for Windows is downloaded from the “Program for Windows” page; since version 1.0.50, the ZERO browser used in it is the one on this website (point 4). If you have them installed, if you bought a licence or if you signed up for the launch list, what points A1 to A7 say still applies; they are those of the previous version of this policy.

A1. The launch list

The list closed on 28 September 2026, the day version 1.0 came out: nobody new can sign up. If you signed up, we do not store that address: it is stored by beehiiv, Inc., a company in the United States, which is also the one that sends the emails. Its servers are in the United States. Together with what the payment gateway keeps if you buy (point A5), it is the only personal data connected with GUARDIANA that lives outside your computer.

What is stored. Your email address, the date you signed up, and whether you open the emails we send you or click a link inside them. That last part is measured by the provider on its own and cannot be switched off; we say so because it is true. What could be switched off, we switched off on 22 September 2026: the automatic tagging that added tracking marks to every link. And we do not use those open and click figures for anything: not to decide whom to write to, not to segment, and they are not cross-referenced with anything. We do not ask for a name, a country or a phone number.
What for. To let you know on launch day and to tell you what changes in the program. Never third-party advertising. The list is not sold, not passed on and not cross-referenced with anything from the program: there would be no way to do so, because the program sends nothing.
You have to confirm. After you sign up, an email arrives asking you to confirm. If you do not confirm, we do not write to you.
How to leave. At the end of every email there is a link to unsubscribe, and it works immediately. You can also write to hola@guardianagroup.com and we will do it.
Deletion. If you ask for your address to be deleted, it is deleted from the whole list, not just from the mailings.

Whoever signed up did so there, on the provider’s page, under its own privacy policy. This website no longer has that button.

A2. The program

GUARDIANA records on your computer the names of the services that each device in your home tries to contact, the time, the device and the category. On Windows, for this computer’s queries, it also records which program asked for each name: its name, its path on disk (which may include your user name) and the file’s fingerprint. Since 1.0.22, on Windows, it also records how much data each program sends to and receives from each destination, minute by minute: bytes, packets, protocol and port (the antivirus’s, only while “GUARDIANA watches my antivirus” is switched on). Never the content of what you do: GUARDIANA does not read or decrypt what travels. Answers are never stored; only the country and network of the server that answered, to tell you where your data travels: GUARDIANA looks them up at that moment in a public database that comes inside the program (DB-IP Lite), without asking anyone, and does not store the server’s address. And when a name presents itself as part of a website but answers as another company’s tracker, the name of that tracker’s site is recorded too (for example, omtrdc.net), never an address. If you use “Make them delete you” or “Case files”, it also keeps which company you wrote to, under which law, what you asked it for (to delete your data or to tell you which data it holds), the date of each step, what it answered and the notes you write yourself; your name and your email address, never (only in your browser, if you tick “Remember them in this browser”). That ledger lives on your PC (Windows: C:\ProgramData\Guardiana; macOS: /Library/Application Support/Guardiana), it is yours, and you can export it and delete it completely from the panel (“What GUARDIANA knows about you”). Whoever administers that PC can read it: GUARDIANA does not encrypt it or hide it from the person who administers the computer, and its threat model says so. When you uninstall, the ledger stays on your disk until you delete it yourself, and so do the trial mark (the date the trial started and the last clock time the program saw) and, if you activated a licence, a copy of the key; never your name or your email address. That mark is in HKLM\SOFTWARE\Guardiana (Windows) or in /etc/guardiana/ (Mac), and an administrator can delete it.

The program’s service (the DNS guardian and its panel) contacts no server of ours. Its only outgoing connections are the licence ones, with the payment gateway: activating it when you enter your key and, after that, checking it. A subscription is checked 8 days after activation and then once per payment period; a Lifetime licence, 8 days after activation and then every 30 days. If a check cannot be made, the program retries it every hour. Each one is recorded in the panel with its date, destination and size.

The program’s window and the Antivirus (from 1.0.50). The program opens this website in its own window, and what you do there is governed by points 1 to 6. When this website is open inside the program, it can ask your computer’s panel for a closed list of readings of that same computer, all read-only: its connections in the last 24 hours, for “Your PC”, and, for the Antivirus, what Windows says about its protection, who can get in, what starts on its own, where its internet goes out and its privacy, what the program watches, what the antivirus you already have does, which programs and browser extensions talk to companies that buy or sell personal data, the use of artificial intelligence services and what the call Watch sees at that moment. Those readings pass from the panel to the page inside your computer, stay in the page’s memory while you have it open, and are not sent to guardianagroup.com or anyone else, nor saved in the browser. No reading on that list changes a rule, the licence or a setting. To check your DNS, the Antivirus sends three lookups for public names (dns.google, one.one.one.one and a made-up name) to each DNS server your computer uses, at most four servers; nothing else goes out.

A3. GUARDIANA ZERO for Windows

GUARDIANA ZERO, the browser for Windows, keeps only on your computer: the log of what it cut (“What was cut”, kept for 31 days: for each request, the name it was going to, the path without its values, how many parameters it carried and, since ZERO 1.0.13, the names of those parameters, never their values, to tell you what it carried: the page you were visiting, an identifier, the size of your screen), each day’s figures and, also for 31 days, which websites you opened and which tracking, advertising or data broker companies appeared on each one (for “Who followed you from site to site”; never those of an isolated tab), the “Who has my data” book, the data you mark to be watched, your favourites, your settings, the licence and trial marks (the date the trial started, which is also stored in a second place), the signed receipts of each mandate and the key with which this computer signs them, a file of technical errors (registro.txt) and the web engine’s profile, with the cookies, the cache and what the websites you visit store (isolated tabs and mandate tabs keep none of that when they close). None of it reaches us, because there is no server of ours, nor is it sent to anyone else; only the cookies and what each website stored go back to that same website when you visit it, as in any browser. “Delete everything” deletes all of the above except your favourites, your settings and the licence and trial marks; until you press it, the web engine’s profile is kept.

ZERO itself only connects to the pages you open and, for the licence, to the payment gateway, Dodo Payments: to activate your key and to check it under the same rules as GUARDIANA (a subscription, 8 days after activation and then once per payment period; a Lifetime licence, 8 days after activation and then every 30 days; if the gateway does not answer, it tries again every hour); and, only if you press “Check for updates”, it reads the public version ledger on GitHub once. If you import favourites from Chrome, Edge or Brave, it reads their favourites file on your computer once, and nothing else. Each of those connections is recorded, with its date, in the program’s “Subscription” view. There is no telemetry, no server of ours and no account. The web engine, Microsoft’s WebView2, is updated by Windows, not by ZERO.

A4. Home Mode

With Home Mode, your PC answers the name queries of the other devices on your Wi‑Fi. The household panel shows totals per device; the detail of a phone can be seen only from that phone, unless its owner shares it. GUARDIANA is not parental control and does not watch people.

A5. Purchase

Payment is made on the Dodo Payments page (checkout.dodopayments.com), the gateway that acts as merchant of record: it is the one that receives your payment and billing details, issues the invoice and handles taxes, under its own privacy policy. We name it because you have a right to know who invoices you. Dodo keeps your name, your email address and the details of your purchase, and also your licence key and its activations; on every activation and every check it sees the IP address from which your computer connects. We do not see your card; in Dodo’s dashboard we see your name, your email address, what you bought and your key. When you activate the licence with a key, the program (GUARDIANA or ZERO) connects to the gateway to check it, and afterwards checks it again as point A2 says; every connection is recorded in your ledger.

A6. Your rights over this data

We hold nothing from your computer: it is all there and you control it, so there is nothing to ask us for or to delete. Outside your computer there may be two things: your email address, if you signed up for the list or wrote to us, and, if you bought, what Dodo Payments keeps about your purchase and your licence (point A5), which we see in its dashboard. Ask us to show you what we hold or see about you, or to delete your email address, and it is done the same day; what Dodo keeps is handled by Dodo, under its own privacy policy. For any question: hola@guardianagroup.com. Data controller: GUARDIANA GROUP S.A.S. (NIT 902.119.954-6), Torre Empresarial PRODEGI, Carrera 3 # 9-30, 18th floor, Bocagrande, Cartagena de Indias, Colombia.

A7. Legal basis, retention periods and complaints

We process your email address because you wrote to us or signed up for the list (your consent, which you can withdraw whenever you want), and the details of your purchase because they are needed to deliver what you bought and for the invoice (a tax obligation). The address on the list is kept until you unsubscribe or ask us to delete it; the email of a conversation is deleted a year after the last reply, or sooner if you ask. What Dodo keeps about a purchase, Dodo retains under its privacy policy and for as long as tax law requires of it. beehiiv is in the United States; beehiiv and Dodo Payments state in their privacy policies where they keep your data and under which safeguards they transfer it (for example, standard contractual clauses). If you believe we are mishandling your data, you can complain to the Superintendencia de Industria y Comercio (Colombia), the ANPD (Brazil), the AEPD (Spain) or your country’s data protection authority; before that, write to us and we will put it right.

11. Changes

If this policy changes, it changes here, with the date. 2 November 2026: what point 5 called the “shielded session” is now called Ultra, and “Shielded” is the name of the version of Communications that works today; nothing else changes in point 5. 31 October 2026: the annex describes the program’s window, “Your PC” and the Antivirus, whose readings do not leave your computer (point A2), and states that, since version 1.0.50, the program’s ZERO browser is the one on this website (point 10). 30 October 2026: Communications adds the encrypted mailbox (point 5), and the program for Windows can be downloaded from this website again (annex). That same day, in the evening: the introduction presents GUARDIANA as a program for Windows that includes the services of this website, which can also be used from a browser. 28 October 2026: the policy is rewritten for the current website (NÚCLEO, Orbit, ZERO and Communications), and the content on the desktop program and the launch list moves to the annex, with no substantive changes. That same day, in the afternoon: the Miami (United States) server, hosted by Vultr, is added for ZERO and for the calls of those who are closest to it (points 4, 5 and 9). Earlier changes: 28 September 2026: the launch list closes with the launch (points 1 and 2), and the licence connections are described as the program has made them since version 1.0.1 (points 3 and 5). 9 October 2026: point 3 bis is added, on GUARDIANA ZERO, the browser: what it keeps on your computer and what it connects to. 10 October 2026: point 3 bis also covers each day’s figures and the websites of the last 31 days used by “Who followed you from site to site”. Also on 10 October 2026: the headline, the introduction and points 2, 5 and 6 state that, besides your email address, Dodo Payments keeps the details of your purchase and your licence; point 1, that the website remembers in your browser the language you choose; points 3, 3 bis and 5, that the Lifetime licence is also checked, and when; and point 3 bis, the mandate receipts, the error file and the web engine’s profile. Also on 10 October 2026: point 3 states what stays on your computer when you uninstall, and the new point 6 bis, the legal basis for each processing activity, how long each thing is kept and where to complain. 11 October 2026: point 3 states that, of each answer, only the country and network of the server that answered are recorded, never its address, and the tracker’s site when a name is disguised, and what “Make them delete you” keeps. 12 October 2026: point 3 states what “Case files” keeps (since version 1.0.17). 13 October 2026: point 3 bis states that, since ZERO 1.0.13, the log keeps the names of each request’s parameters, never their values. Since ZERO 1.0.15, when you open a cut you can see on your screen everything it carried, with its values: ZERO reads it in your PC’s memory to show it to you and forgets it when it closes; it does not keep it, it does not leave your PC unless you download it, and passwords, keys and session cookies are never shown. The program’s code is public and anyone can check that it does what we say. 26 October 2026: point 3 ter is added, on searching with Google in the web version of ZERO.