Privacy

What the app sends, and where

• Keyboard and mouse events, clipboard text and images, and screen geometry travel only between your two PCs on your local network, encrypted with AES-256-GCM using a key derived from your pairing code. They never leave your network and are never stored.
• Discovery uses small UDP broadcasts on your local network containing the PC's name and port. No secrets.
• Once a day the app fetches https://deskstitch.com/latest.json (about 300 bytes) to learn whether a newer version exists. That request carries the app version in its user agent and nothing else. You can turn it off by clearing updateUrl in config.json.

What the app stores on your PC

• Settings, the desk map, trial dates and your license key, in %LOCALAPPDATA%\DeskStitch.
• Log files with connection events and screen positions, never keystrokes or clipboard contents.

License activation

When you enter a license key, the app sends the license id, the PC name and a hashed machine identifier (a one-way hash of the Windows machine GUID and the license id) to deskstitch.com, and repeats that about once a day to renew the seat. That record exists so one key does not run on more PCs than it was sold for. Deactivating the PC deletes its entry.

What we collect

Only the activation records above. There is no telemetry, no account and no analytics in DeskStitch itself. If you send us a diagnostics zip with a bug report, it contains your logs, desk map and monitor list with the pairing code removed; we use it only to fix your problem.

License keys

A key contains the name and e-mail it was issued to, signed so the app can check it without contacting us. Activation (above) is the only time the key itself leaves your PC.

This website

Static pages. To know which pages are read and how often DeskStitch is downloaded, the site uses Google Analytics in cookieless mode: no cookies are set, nothing is stored on your device, Google Signals and advertising features are off, and we never ask you to consent to more. Google receives the page address, the referrer, your browser type and a truncated IP address, and reports aggregated counts to us; it does not identify you to us. Fonts are loaded from Google Fonts. Downloads are served by GitHub. Payments are handled by Stripe on its own pages. All of them may log requests under their own policies.