Privacy Policy

Overview

XDECK is a tool that turns your phone into a Stream Deck, giving you instant control over your PC. We built it with a simple principle: your data stays yours. This policy explains exactly what we collect, what we don't, and why.

What Data XDECK Collects

XDECK collects the absolute minimum data required to make the service function:

• Pairing codes: Temporary, randomly generated codes used to connect your phone to your desktop. These codes are ephemeral and are not stored after pairing is complete.
• License keys: If you purchase XDECK, a license key is generated. On the desktop app, the key is stored locally on your device. It is only transmitted to our servers during the initial activation via Stripe, where it is verified against your purchase.
• Connection metadata: During cloud relay usage, WebSocket connection state (connected/disconnected) is tracked to manage active sessions. No button presses, layouts, or personal data are transmitted through or stored on relay servers.

How Data Is Used

Every piece of data we handle serves one purpose: providing the XDECK service to you. We do not sell, rent, or share your data with any third party for advertising, analytics, or profiling purposes. We have no interest in what buttons you press or what apps you launch.

Cloud Relay Data Handling

When you use XDECK over the internet (rather than local WiFi), your phone connects to our cloud relay server. Here is exactly what happens:

• End-to-end encrypted: All communication between your phone and desktop is relayed through encrypted WebSocket connections. The relay server acts as a tunnel, not a listener.
• Not stored: The relay does not log, store, or record any of the data being transmitted. Once the connection ends, the data is gone.
• No message inspection: The relay server forwards encrypted data between your devices without decrypting or inspecting it. It cannot see your button layouts, hotkeys, or any personal information.

Local Network Mode

When both your phone and desktop are on the same WiFi network, XDECK communicates directly between devices over your local network. In this mode, no data leaves your network at all. There are no external servers involved, no cloud components, and no internet connection required.

License Key Handling

Your license key is stored locally on your device in the application's local storage. We do not maintain a centralized database of license keys. During activation, the key is sent to our server once via Stripe's secure infrastructure to validate the purchase. After validation, the key resides solely on your device. You are free to back it up or remove it at any time.

No Tracking, No Analytics, No Cookies

XDECK does not use any analytics tools, tracking scripts, advertising pixels, or cookies. The only cookies that exist are those technically necessary for your browser to maintain the WebSocket connection during active use. We do not use Google Analytics, Facebook Pixel, Mixpanel, or any other third-party tracking service. We have no interest in profiling our users.

Third-Party Services

XDECK uses a limited set of third-party services, each for a specific and necessary purpose:

• Stripe: Handles all payment processing. We never see or store your credit card information. Stripe's privacy policy governs how your payment data is handled.
• Cloudflare: Hosts our PWA (progressive web app) and landing pages. Cloudflare's CDN infrastructure ensures fast global access.
• Render: Hosts our cloud relay server. The relay processes WebSocket connections in real-time and does not persist any data.

User Rights and Data Deletion

You have full control over your data. Because XDECK is designed to store minimal data, exercising your rights is straightforward:

• Access: Since we store virtually no personal data, there is little to request. Your license key lives on your device, not on our servers.
• Deletion: Uninstall XDECK from your device. This removes all locally stored data, including your license key, button layouts, and settings. If you used a cloud relay session, the session data is automatically discarded when the connection closes.
• Portability: Your button layouts and configurations are stored as local files you can export and back up at any time.

Children's Privacy

XDECK is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page. Continued use of XDECK after changes constitutes acceptance of the updated policy. We will not use your data in ways not described in the policy without informing you.

Contact Us

If you have any questions about this privacy policy or how your data is handled, reach out to us at support@xdeck.app.