Effective 30 September 2026. This describes what the software actually does, as it is built today.
In short
Most of what TinyScreen shows stays on your computer and never reaches us. Our servers hold your account and licence, your purchases, and the services you chose to connect. What your dashboard shows passes through our servers only while one of your phones or tablets is watching it, and is removed shortly after it stops.
We do not sell data, show advertising, or use third-party tracking or analytics.
1. Who we are
TinyScreen is operated by xlggtech, Israel. Full operator details are in the Terms of Use. For any privacy question, or to ask for access or deletion, contact us at:
TinyScreen reads, displays and stores these on your computer, and does not send them to us:
The hardware readings shown on your strip display — processor and graphics load and temperature, memory, disk and network.
Your widget arrangements, profiles, skins, notes and settings. (Of your arrangements, only averages leave the computer — see "Arrangement statistics" in section 3.)
The text you select in other windows for the text tools: the keyboard-language fix and reading aloud happen entirely on your computer. Grammar correction goes to the AI assistant you installed on your own computer (Claude Code, Codex, Gemini or Ollama) with your own account — not through us. Only translation passes through our server, as described in section 3.
What is playing, the game that is running, and your Steam, Battle.net and Riot libraries — read from the installations on your computer.
Your Claude Code usage. The app contacts Anthropic directly from your computer, with your own sign-in, not through our servers.
Your Alpaca API keys, if you connected them for stock market data. They are stored encrypted with Windows data protection, tied to your Windows account, and sent only to Alpaca.
3. What we store on our servers
Account and licence
Your email address, how you sign in (email and password, or Google), and a user identifier.
Your licence key, licence type, trial status, credit balance and the history of credit movements.
For each computer you activate: a machine identifier, the computer's name, and when it was last seen. These enforce the number of computers a licence allows and prevent repeated free trials.
Purchases
Payment happens at PayPal. We keep the order identifier, product, amount and email — and never receive card or bank details.
Services you connect
When you connect a service such as Discord, Google, Spotify, Twitch, Kick or Google Home, we store the access tokens that service issued and your account name there. In most cases they are used only to fetch what the widgets show. There are two exceptions, and both are things you do yourself from the screen: in Google Tasks you can tick a task off, add one and delete one; and in the calendar you can add an event, and only if you separately granted permission to write to it. Mail is read-only — you cannot send, reply or delete. The list brings a sender, a subject and a first line of each message, and the body is fetched only when you open one. No mail content is stored by us. You can disconnect any service at any time.
Viewing from your phone or tablet
For each phone or tablet you connect we keep its name, its type, when it last viewed, and what you chose it should show.
Only while one of your devices is viewing your computer, the computer sends a snapshot of what your dashboard shows so that device can display it. It can include hardware readings, Claude usage, your weather location name, what is playing, the game running, recent notifications including a short preview of the message, the name of a caller, the open project and file names, OBS status, battery levels and Claude project names.
Only devices signed in to your account can read it. Only the latest snapshot is kept, and it is removed about a minute after no device is watching.
When your phone and computer are on the same home network, the pictures of the widgets and your taps on them travel directly between the two, not through our servers. For that the snapshot carries the computer's local address and an access code that changes every launch; both are readable only by your own devices.
Translation
When you press a language on the translate widget, the text you selected is sent to our server and from there to Google Cloud Translation, and the translation comes back to you. The text itself is not stored by us — neither the original nor the translation. Only the number of characters translated each month is kept, per licence and in total, to keep within the free usage allowance.
Arrangement statistics
After you arrange widgets by hand, the app sends our server, for each widget kind: what share of the board it takes, its shape, where its centre sits on average, and how many times you arranged it — four numbers per kind, and nothing more. The arrangement itself, what the widgets show, and any names are not sent. The numbers are kept under your licence so a new send replaces the previous one, and are folded into a shared, anonymous average of all users. They are used only so that "Rearrange" lays the board out to your taste and to others'.
Generated wallpapers
When you generate a wallpaper, the description you wrote is kept with the render job and sent to the rendering provider. Skin art uploaded from your computer is stored under your account.
4. Who else is involved
TinyScreen relies on these services. Each has its own privacy policy.
Google Firebase and Google Cloud — website hosting, database, server and sign-in. The servers are located in the United States.
PayPal — payment processing.
Kolbo AI — wallpaper generation. Receives the description you wrote.
Google Cloud Translation — translating the text you selected, when you press a language on the translate widget. Receives the text and returns a translation.
Anthropic — Claude usage, directly from your computer.
Open-Meteo — weather, for the location you set. If you have not set one, the app asks ipapi.co for an approximate location based on your IP address.
Alpaca — stock prices and candles, directly from your computer with your keys. Binance and Nasdaq's symbol directory — crypto prices and symbol search, with no personal data.
ntfy.sh — only if you set up alerts to your phone.
The services you chose to connect, such as Discord, Google, Spotify, Twitch and Kick.
5. How long we keep it
Account, licence, connections, wallpapers and arrangement statistics — until you delete your account.
Text you sent for translation — not stored. The count of translated characters — for the calendar month in which they were translated.
The phone-viewing snapshot — about a minute after no device is watching.
Temporary sign-in records — a few minutes.
A record that a purchase happened, without name, email or any link to the account — for as long as the law requires business records to be kept.
An encoded machine identifier that prevents repeated trials — kept after deletion, with no link to the account.
Pointer replays from the website — 90 days. Page-view summaries (without the replay) — one year.
6. Your rights, and deleting your account
You may ask to see, correct and delete your information, under the Israeli Protection of Privacy Law, 5741-1981, and the laws that apply to you.
To delete your account and everything linked to it: in the desktop app, Settings → Account → Delete account. The full explanation is on the account deletion page.
All communication is encrypted. Keys you bring yourself are stored encrypted on your computer, and service tokens are kept on the server and never sent to the app. No system is perfectly secure; if we learn of a security incident affecting your information, we will notify you as the law requires.
8. Children
TinyScreen is not intended for children under 16, and we do not knowingly collect their information.
9. This website
This website measures its own use: which pages were seen, where people clicked, how far they scrolled, how long they stayed, and a replay of the pointer moving over the page — so we can make it better. The measurement is ours alone: no advertising networks, no third-party trackers, and nothing is sold or shared.
What is kept: a random identifier your browser made up (so a return visit can be told from a first one), the page, browser and operating system, screen size, language, time zone, the site you came from, and clicks and pointer movement. What is not: your name, email, or anything you type — input fields are masked before anything leaves your browser. Your chosen language is stored as well.
Prefer not to be measured? Open any page with ?analytics=off at the end of the address, or turn on Global Privacy Control in your browser — either switches the measurement off entirely.
10. Changes
If we change this policy we will update the date at the top. A material change will also be shown in the app.