Exactly what Guardian collects

Guardian has to know who is trying to connect to your computer, and whether anybody approved it. It does not need to live the rest of your life.

What can leave the PC

Remote connection attempts: the address they came from, the remote-support tool involved, and the time
What was decided about each attempt, who decided it, and whether the session was allowed or dropped
Your whitelist and your Blocked IPs list, which are held against your account so they survive a reinstall
Security-relevant activity inside a session you approved, including a transferred installer or an attempt to run with higher privileges
The small amount of information required to send an approval request or an alert to a Trusted Guardian

What Guardian does not take

Your personal documents
Your photos
Your passwords
A continuous recording of your screen
A product that sells your browsing history

How that is handled

Detection is local-first. The decision to hold a connection is made on the PC.
Communication off the PC is encrypted.
Personal data is not sold.
Connection and incident records are kept so Guardian Story can explain what happened while the account exists. You can ask support@xcelcor.com to delete account data.

Your approval settings

Who may approve a connection, the unlock PIN, your whitelist, and your Blocked IPs are stored against your account on this website rather than on the PC. That is deliberate: if they lived on the machine, someone who had taken control of the machine could change them. It also means the PIN is never rendered in the app, so it cannot be read off the screen.

Trusted Guardians

A Trusted Guardian is asked to approve or refuse a connection, and can be told that something serious happened. That request carries the address, the tool, and the time. They are not given your screen, messages, documents, passwords, or banking information.

If a future build ever needed a new category of data, this page would have to change first. The table on the homepage is the promise.