Legal

Privacy Policy

Last updated 5 November 2026

DeskSail: Remote Desktop ("DeskSail") lets you see and control your Mac from your phone. It is run by Softentra. This policy explains what we collect when you use the DeskSail apps and this website, and what we don't.

The short version

• Your screen, keystrokes, mouse movements and clipboard go directly between your own devices, encrypted. They never reach our server.
• We store your name, email address, a secure hash of your password and the list of devices you sign in with, so that your devices can find each other.
• We don't sell your data, show ads or use analytics or tracking tools.
• You can delete your account, and with it your personal data, at any time.

What we collect

Your account

• Name and email address, which you give us when you sign up. We use your email address to confirm your account, to reset your password and for essential service messages. We don't send marketing email.
• Password, stored only as an Argon2id hash. We never store or see your password itself.
• Google account ID, if you sign in with Google. We receive your Google account's ID, email address and name from Google and nothing else.
• Plan: every account is on the free plan.

Your devices

• For each Mac, phone or tablet you sign in with: a random device ID, its public key, the device name you see in the app (for example "Alex's MacBook"), its platform (macOS or Android), when it was first and last connected, and whether it's online.
• Sign-in tokens for your devices and website sessions. We store only hashes of these.

Connection setup

To connect your phone to your Mac over the internet, the two devices exchange short setup messages through our server. These describe how to reach each device (including network addresses) and are signed by the sending device. We pass them on and don't store them.

Logs

Our server logs technical events such as sign-ins, device IDs, message types and errors, to keep the service running and secure. These logs never contain passwords, tokens, screen content or what you type. Our web server records IP addresses and the pages requested, and keeps these logs for 14 days.

What we never collect

Your screen, video, audio, keystrokes, mouse or touch input, clipboard and files never pass through our server. They go straight from your Mac to your phone over an encrypted WebRTC connection (DTLS-SRTP).

Permissions the apps use

• Mac: Screen Recording, to share your screen with your phone, and Accessibility, to apply your phone's mouse and keyboard input. Both are used only during a session you approved.
• Android: camera, only to scan the pairing QR code; network access; notifications, to show an ongoing session; and biometrics or your screen lock, only if you turn on App lock.

Who processes data for us

• DigitalOcean hosts our server.
• Cloudflare provides DNS and passes traffic to this website through its network.
• Google delivers our emails (Google Workspace), provides "Sign in with Google" if you use it, and runs the public STUN service your devices use to discover their own network address.

We don't share your data with anyone else, except if the law requires it.

How long we keep it

We keep your account until you delete it. When you delete your account, we immediately delete your name, email address, password hash, Google account ID, sessions and tokens, and sign out all your devices. We keep each former device's random ID and public key, without a name or any link to you, so that the ID can never be reused by another device.

Your choices and rights

• See and remove your devices on the Devices page.
• Delete your account on the Account page, or from the DeskSail app (Settings → Account → Delete account).
• Depending on where you live, you may have the right to access, correct, export or delete your data, or to object to how we use it. Email [email protected] and we'll help.

Children

DeskSail is not directed at children under 13, and we don't knowingly collect their data.

Security

Connections to our server use HTTPS. Every message between devices is signed with that device's key and checked by the other side, and your Mac asks you before a new device can connect.

Changes

If we change this policy, we'll update the date above. For important changes we'll also tell you by email.

Contact

Questions about privacy? Email [email protected].