Privacy and security

What AirMouse sends, where it goes, and how a paired phone is kept in its place.

What leaves the phone

Only three kinds of traffic, all on your local network:

• the connection to the computer you chose,
• Bonjour, to find computers nearby,
• the wake-on-LAN packet, when you ask for it.

There is no backend. AirMouse uses Apple frameworks only: no third-party code, no analytics, no crash reporting, no advertising. Its App Store privacy label is Data Not Collected.

Pairing and tokens

• Trust is given on the computer, with Allow or a single-use 4-digit code that changes after five wrong tries.
• The phone keeps a random 256-bit token in the iOS Keychain. The computer stores only a SHA-256 hash of it.
• A connection that has not paired can only ask to pair.

What the computer app refuses

• Connections from outside private network ranges, including the internet and VPN ranges such as 100.64.0.0/10.
• Shell commands from macros, unless started with --allow-shell.
• Unknown key names, links without a scheme, and pauses longer than 60 seconds.
• Its pairing page answers only on the computer itself, and removing a phone from it needs a header a web page cannot send.

Encryption

The connection between phone and computer stays on your local network but is not encrypted today. On a network you do not trust, such as a café Wi-Fi, someone on the same network could read what you type. Use AirMouse on home and office networks, and avoid typing passwords over it on public Wi-Fi. Encrypted connections are planned.

The clipboard

What a password manager marks as private is withheld by the computer on Mac and Windows, and never crosses. Nothing from the clipboard is stored anywhere but the two devices.

Camera

The camera is used only to read a pairing QR code. No photo or video is taken.

This website

No cookies, no trackers, no analytics. The full policy is at brunescco.com/privacy.