MirroDesk Privacy Policy

MirroDesk is a remote-access tool that lets you view and control your own computers from a Chrome browser.

The Chrome extension

The MirroDesk extension shows your MirroDesk computers in its toolbar menu and opens MirroDesk in a single tab. To do that it keeps, in this browser only, the list of computers the MirroDesk web app shows (computer IDs and the names you gave them) and which tab MirroDesk is open in. It contains no analytics, advertising or tracking code, does not read your other tabs or browsing history, and sends nothing to us or anyone else.

The web app and your connections

When you connect to one of your computers:

• You sign in to, or directly address, your own MirroDesk server. Device identifiers and connection requests pass through that server so the viewer and the host can find each other.
• The screen, keyboard, mouse, clipboard and file data of a session travel directly between the viewer and the host whenever possible. When a direct connection is not possible, the session is relayed through the MirroDesk server as encrypted traffic; the server cannot read session contents and does not record them.
• Session connections are end-to-end encrypted between the viewer and the host.
• We do not sell personal data, and we do not use connection data for advertising.

Data kept in your browser

The MirroDesk web app keeps a few things in your own browser's local storage so it can work for you. This data stays on your device and is not sent to the MirroDesk server:

• Your My computers list: the IDs of computers you connected to, the names you gave them, and when you last used them.
• Only if you tick Remember password on this browser: a hashed (scrambled) form of that computer's password, so you are not asked again. The password itself is never stored.

You can remove a saved password with Forget password, or a whole entry with Delete, at any time. Clearing your browser's site data removes all of it.

If you sign in with Google

Signing in is optional. MirroDesk works without an account. If you choose Sign in with Google:

• Google tells us your Google account ID, email address, name and profile picture. We ask for nothing else (only the basic "openid email profile" permissions). We never see your Google password.
• We keep, on the MirroDesk server: your account (email, name, picture), your My computers list (computer IDs, the names you gave them, and when you last used them), the browsers you are signed in on (browser type, sign-in and last-active times), and a security log of sign-ins and account changes. Network addresses are stored only as a one-way scrambled value.
• Passwords of your remote computers are never sent to or stored on the server.
• We use this data only to run your account and keep your list in sync. We do not sell it or use it for advertising.
• You can sign out of any browser, and delete your account at any time in My account → Delete account. Deleting removes your email, name, picture, computer list and sign-ins from the server.

Data the server keeps

The server keeps a registry of device IDs that have registered with it (device ID, public key, last-seen network address) so devices can be reached. This is the minimum required to broker connections.

To run the service, the server also keeps anonymous usage statistics, such as how many remote sessions are open at the same time and how many start each day. These are counts only: they contain no names, email addresses, computer IDs or network addresses.

Contact

Questions about this policy: hibnfdesign.apps@gmail.com