Privacy Policy

Matrix Remote is built so that what happens on your screen stays between your two Macs. This policy says what data exists, where, and what we cannot see.

1. What we cannot see

• Your screen, your mouse and your keyboard. The picture and every input event are encrypted between the two Macs (DTLS-SRTP for video, DTLS for input, and the set-up messages are sealed end to end). Our relay only passes encrypted data along. Nobody at the Company can view a session, and no session content is ever stored by us.
• Your pairing codes, check numbers and access password. They never leave your Macs in a readable form. The access password for unattended sessions is checked on the Receiver Mac itself.
• Which Macs are paired with which. The paired lists live only on your Macs.

2. What stays on your Mac

Everything the App remembers is stored on the Mac itself:

• the Mac's own identity keys, its list of paired Macs, the access-password hash and the key for the session history — in the macOS Keychain, marked "this device only", never synced to iCloud;
• the session history (which paired Mac connected, when, for how long, view-only or control, direct or relayed) — in an encrypted file under Application Support, up to 500 entries, which you can clear from "This Mac";
• four settings in the App's preferences: your chosen role, whether paired Macs may ask to connect, "Always use the relay", and "Use my Tailscale network".

Deleting the App and its Application Support folder, and its items in Keychain Access (service "com.matrixremote.app"), removes all of it.

3. What our relay sees, and for how long

When your Mac uses the Company's relay (only for internet connections, and only while "Let my paired Macs ask to connect" is on or you connect to a Mac over the internet), the relay holds in memory, while your Mac is connected:

• your Mac's device ID (derived from its public keys) and those public keys;
• which device IDs exchanged encrypted set-up messages and when;
• a hash of a pairing code for up to 5 minutes while you are pairing, and hashes of the presence tokens that let a paired Mac see that you are online;
• your Mac's IP address, used for rate limits;
• the issuing of short-lived credentials for our TURN server.

The relay keeps no database and writes none of this to disk; restarting it forgets everything. It does not know your Mac's name. Once the relay checks licences, your Mac also shows it the whole licence key each time it connects; the key can include the name and email address it was issued to. The relay checks the key and keeps only the licence number, a hash of the Receiver's device ID and the dates it was used, not the name or email.

When two Macs cannot reach each other directly, the encrypted video and input pass through our TURN server. That server sees the IP addresses of both Macs, the amount of data, and the encrypted packets themselves, which it cannot decrypt.

Server logs. Like any internet server, our server keeps standard connection logs (IP address, time, request) for security and troubleshooting, for 14 days.

4. What we do not do

• No analytics, usage statistics, crash reports or telemetry of any kind.
• No advertising, no data brokers, no selling or sharing of data.
• No third-party services in the App. The App talks only to your paired Macs and to our own server. (The App is built with Google's open-source WebRTC library, which runs inside the App and contacts no Google server — we never use Google's public STUN.)
• No access by Matrix Remote staff to your Macs. We will never ask you to pair with us.

5. Local network and Tailscale

On your local network the App announces itself with a random tag (not your Mac's name or ID) so your other Macs can find it, and asks macOS for the Local Network permission. If you use Tailscale, the App reads your Mac's Tailscale address from the network interfaces and shows it to you; it does not contact Tailscale.

6. Your rights and contact

You can see and clear the session history on each Mac, remove paired Macs, and delete the App's data as described in §2. If you hold a licence you may ask us to delete your licence record when it has expired. Questions and requests: support@matrixremote.app.

Controller: Stingray International FZ-LLC, Ras Al Khaimah, United Arab Emirates.