Privacy
How to read this: the shortest true version is that almost nothing reaches us, and the parts that do are listed below by name.
This website
These pages set no cookies, run no analytics, and build no profile of you. They load two typefaces from Google Fonts, which means Google's servers see that a browser somewhere asked for a font. Nothing else leaves the page.
JoyRemote on your own network
When two of your computers talk to each other on the same network, no server of ours is involved at any point. We do not see that it happened, how long it lasted, or that the computers exist. There is nothing for us to keep.
Each computer keeps a log of connection requests on itself, for you to read. It stays on that computer.
Reaching a computer over the internet
This uses our directory server, which introduces the two computers to each other. It holds, for each computer:
- the ten-digit number it has been given;
- the public half of a key that computer generated itself, which is how it proves which computer it is;
- hashed identifiers of its hardware, so that a computer which is rebuilt can reclaim the same number — hashed on your computer before they are sent, so what we hold cannot be turned back into a serial number;
- a name, if you gave it one;
- when it was last seen.
While two computers are being introduced, the server also passes each one the network addresses the other might be reachable at. It does this and forgets it.
What it never sees: your screen, your keystrokes, your files, your clipboard, or anything else inside a session. Those are encrypted between the two computers with keys the server does not have and cannot ask for. This is true even when the connection is carried by our relay, described below.
The relay
When a network will not allow two computers to connect directly, we forward the traffic between them. The relay is deliberately built to know as little as possible: it sees two network addresses, a random session number, and how many bytes passed. It cannot read what it carries, and it is not told whose session it is — permission to use it arrives as a signed ticket naming the session and an expiry, and nothing else.
Rate limiting
The directory counts recent requests against the network address they came from, so that one address cannot take an unreasonable number of new numbers. These counts are held in memory for an hour or a day, are never written to disk, do not survive a restart of the server, and are used for nothing else.
Payment
Payments are taken by Paddle.com Market Limited, who are the merchant of record. They collect your payment and billing details on their own pages; we never see them and could not store them.
What passes from us to Paddle is a random reference that means nothing to anyone without our records. Your computer's identity does not go with it. What comes back is that the reference was paid.
Phones and browsers
When you turn on access from a phone or a browser on your own Wi-Fi, that page is served by your own computer, not by us. The pairing secret is created and kept there. We are not involved and see nothing.
How long things are kept
A number and its record stay for as long as the computer uses them. A number nothing has used for a year is reclaimed and the record removed, so that numbers belonging to computers which no longer exist do not stay issued for ever.
Asking us about your data, or to remove it
Write to info@joyremote.com. Tell us the ten-digit number of the computer concerned and we will tell you everything held against it, or remove it, as you prefer. Removing it means that computer gets a new number the next time it registers.
Changes
If this changes, the version installed alongside the software changes with it, and section 11 of the licence agreement is the part of the agreement this expands on.