Privacy
What DeskPair holds, what it does not, and how to get rid of it.
Who this is about
DeskPair is made by Syno Compute X Co., Ltd. Write to [email protected] about anything on this page.
If you connect through a DeskPair portal somebody else runs, this describes what that portal holds, and they are the people to ask about it. We never see it.
What is kept, and why
- Your e-mail address and display name
- Because the address is how you sign in, and because a verification and a password reset have to be sent somewhere. Passwords are never kept: what is stored is a PBKDF2-HMAC-SHA256 hash with 600,000 iterations and a per-account salt, which cannot be turned back into your password.
- Each device you link, and its public key
- A linked device gets its own key pair and proves itself by signature, so your account password is never typed into or stored on a phone or a second computer. We keep the public half, the name you gave the device, its platform, and when it was last seen — so the list of devices you can revoke means something. Revoking one deletes its token immediately.
- Your saved list of computers
- The identifier of each computer you saved, the name you gave it, the folder you filed it under, and any note you wrote. This is the list that follows your account between devices; it is the reason the account exists.
- Network addresses, briefly
- The signalling server sees the address your connection comes from, because that is how two computers are introduced to each other and how it works out whether they can talk directly. It is used for that and discarded.
What is never kept
Nothing of what you see or do in a session. No screen contents, no keystrokes, no mouse movement, no clipboard, no transferred files. A DeskPair session is encrypted end to end between the two computers with AES-256-GCM, using keys they agree between themselves. When a session has to go through one of our relay servers — because the two computers cannot reach each other directly — that relay moves bytes it cannot read. It does not hold the key and there is nothing in it for us to keep.
There is no advertising and no tracking of any kind. Nothing here is sold, and nothing is shared with anyone. The apps carry no third-party tracking libraries; the only third-party component in any of them is Google Play Services' code scanner on Android, which reads a pairing QR code in Google's own process and on the device — which is why the Android app does not ask for camera permission at all.
The network in front of this site
This site is served through Cloudflare, which means Cloudflare — not only our server — sees every request to it, including your address. Two of its features are switched on. It counts page views for us: which pages, from which country, through which browser. That count sets no cookie, is not tied to you, and cannot follow you to any other site; what we see is a total. And it rewrites the contact address above so that address-harvesting robots cannot read it, which is the one piece of JavaScript this site serves. Neither is on the apps, and neither touches a session: what happens between two computers never passes through here at all.
Cookies
One, fd_session, set when you sign in and deleted when you sign out. It is what keeps you signed in and it does nothing else. Nothing on this site sets a cookie to measure anything, which is why there is no consent banner on it.
How long it is kept, and how to remove it
Everything above is kept while the account exists. You can delete the account yourself, at any time, from Delete your account once you are signed in. That removes the account, every device linked to it, every session, and your saved list of computers. An organisation you are the only member of goes with it. It cannot be undone and nothing is kept back.
Individual devices can be revoked one at a time from Your devices without deleting anything else.
Children
DeskPair is not directed at children and is not intended for people under 13.
Changes
If this policy changes in a way that affects what is collected, the change will be described here and this date will move with it. Last updated 21 September 2026.