Privacy Policy

Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

For anything about privacy, write to info@miniremote.app. More about us is in the Legal Notice.

This website

• No cookies, and nothing stored in your browser for statistics. The site loads no scripts or fonts from other domains.
• Hosting: the site runs on our own server, rented from Hostinger International Ltd. in a data center in Frankfurt, Germany. Your browser's IP address reaches the server so it can answer; we don't keep access logs of the website.
• Visit statistics: we count page views, clicks (such as on Download), how far pages are scrolled, and errors in the page's code with PostHog, hosted in the EU (Frankfurt), in its cookieless mode. To tell visitors apart without cookies, PostHog turns your IP address and browser details into an anonymous code using a secret that changes every day, so it can't recognize you on another day; it doesn't store your IP address. We see which pages were visited, where the visit came from, the country, and the browser and device type. The requests go to r.miniremote.app, an address of ours that PostHog runs for us through its network provider Cloudflare. If your browser sends Do Not Track, nothing is counted.
• Appearance: if you pick light or dark mode, your browser remembers that choice on your device. It isn't sent to us.

Legal basis for the statistics: our legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR).

Connections between your devices

To let a viewer (a Mac, iPhone or iPad) reach a Mac by its Host ID, the apps talk to our server at miniremote.app. It processes:

• The Mac's Host ID, password, name and public IP address, while its MiniRemote server runs

  Why:

  So viewers can find and reach it

  Kept:

  In memory while the Mac is online; nothing is stored

• A viewer's Host ID and password attempt, its device name, a random device ID, its IP address, and whether it's an AI agent

  Why:

  To check the password, connect the two devices, and lock out password guessing

  Kept:

  In memory for the connection; nothing is stored

• The Host IDs and passwords of the Macs saved in a viewer

  Why:

  To show which of your Macs are online

  Kept:

  Compared in memory, never stored

• Public IP addresses and ports of both devices

  Why:

  So they can connect directly, or through our relay when that fails

  Kept:

  For the connection

• Server logs: events with IP addresses, Host IDs, and Mac and viewer names

  Why:

  Security, preventing abuse, and fixing problems

  Kept:

  Until the log rotates: older entries are overwritten once it reaches its size limit

Your screen and everything else you do in a session never pass through our server in readable form. Every connection is end-to-end encrypted with TLS 1.3 between your devices. When a direct connection isn't possible, our relay forwards the encrypted packets without being able to decrypt them, and stores nothing.

Legal basis: providing the service you use (Art. 6(1)(b) GDPR) and our legitimate interest in running it securely (Art. 6(1)(f) GDPR).

What stays on your devices

• Screen, input, sound, clipboard and copied files go only between your devices.
• Saved Macs and passwords are kept on your device, the passwords in the Keychain.
• Screenshots, recordings and stats logs are saved on your device (the Mac viewer writes connection stats to ~/Library/Logs/MiniRemote).
• Dictation uses Apple's speech recognition. Depending on your device and language, Apple may process the audio; Apple's privacy policy applies to that.
• AI agents (MCP): when you connect an AI tool such as Claude, Codex or Cursor, MiniRemote gives it screenshots of the Mac you choose and carries out its actions. What the tool sends to its provider is covered by that provider's privacy policy.

Purchases and license keys

Pro and Lifetime are sold by Creem, which acts as the merchant of record: it handles checkout, payment, taxes, invoices and refunds, and processes your name, email address, billing address and payment details as an independent controller under its own privacy policy. We never see your payment details.

From Creem, our server receives and stores:

• your license key, stored only as a one-way hash, with its order or subscription ID and product;
• the subscription's status and the end of the paid period, kept current by Creem;
• for each Mac you activate the key on: its Host ID, its name and the activation date, so a key works on up to 3 Macs and the app can list them.

We keep this while the license exists. An activation is deleted when you deactivate that Mac. Backup copies of this database are kept for 14 days. Legal basis: Art. 6(1)(b) GDPR.

Anonymous usage data

With Share anonymous usage data on, the apps send us usage events and error reports through PostHog, hosted in the EU (Frankfurt). It helps us see which features are used and fix crashes and connection problems. It's on by default and you can turn it off at any time: on the Mac in Settings → General, on iPhone and iPad in the app's settings.

• What's sent: events such as a connection succeeding or failing (with the kind of error, the connection type and the screen size), features used, error reports, the app version, the platform, and the device model and system version.
• What's never sent: Host IDs, passwords, names, addresses, screen content, clipboard content or files.
• Not linked to you: events carry a random ID created on the device, not your identity. PostHog receives your IP address when the app sends data but doesn't store it.

Legal basis: our legitimate interest in improving MiniRemote and fixing errors (Art. 6(1)(f) GDPR). Turning the setting off is your objection; the app then sends nothing to PostHog.

Updates

The Mac app checks miniremote.app for new versions (turn off Check automatically in Settings → General to stop it). That request contains your IP address and the app version, and isn't logged.

Email

When you write to info@miniremote.app or support@miniremote.app, the message is forwarded to our mailbox by ImprovMX, our email forwarding provider. We use it only to answer you and keep it as long as the conversation needs, or as long as the law requires.

Service providers

We don't sell data, show ads or track you across other apps and websites. The providers we use:

• Hostinger International Ltd.

  For:

  Server and website hosting

  Where:

  Frankfurt, Germany

• PostHog

  For:

  Anonymous usage data, error reports and website statistics

  Where:

  EU (Frankfurt)

• ImprovMX

  For:

  Email forwarding

  Where:

  See their privacy policy

• Creem

  For:

  Checkout and payments, as an independent controller

  Where:

  See their privacy policy

• Apple

  For:

  App Store and dictation, as an independent controller

  Where:

  See Apple's privacy policy

Where a provider processes data outside the EU or EEA, it does so under an adequacy decision of the European Commission or the EU Standard Contractual Clauses.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on our legitimate interests. Write to info@miniremote.app. Since MiniRemote has no accounts, include the Host ID or license key it's about, so we can find the data.

You can also complain to a data protection authority. In Croatia that's the Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb; you can also turn to the authority where you live.

Children and changes

MiniRemote isn't directed at children under 16. If this policy changes, we update this page and the date at the top; for important changes we'll also tell you in the apps.