Privacy
Who sees what, plainly.
This site, the app, the relay in the middle and the optional account are separate flows of data. Here is what each one sees and what it doesn’t.
Visiting this site
No cookies, analytics, ads or third-party trackers. Fonts, images and the script come from this domain; the page makes no requests to other servers. There are no forms and the site asks you for nothing.
The server sees your IP address to answer the connection. The site is configured without access logs; that does not mean the server or network operators can never see connection data.
Using the app: the relay
Connections go through remote.us2us.app. The relay knows:
- Device IDs and the public keys they belong to
- IP addresses
- When sessions start and end, and how many bytes flow
- Whether the viewer chose the code or the password
What the relay never sees
The one-time code, the permanent password, your screen, keystrokes, mouse movements and the rest of the session either never reach the relay or pass through encrypted so it cannot read them. The relay does not record sessions. Its logs keep IDs and times only; neither end logs codes, passwords or session keys.
If you sign in
When you sign in and share, the relay also stores which device IDs belong to which us2usmail.com account (by the account’s opaque ID), the names you gave your computers, and when each was last seen. Your user name is in the signed statement the relay receives, but it is not stored. Offline computers not seen for 30 days drop off the list.
The accounts service (us2usmail.com) learns only the device public keys it signs for, not IDs or sessions. If you never sign in, none of this is sent.
What stays on your computer
All of this stays on your computer; the app doesn’t upload it anywhere.
- Device key: in a file only you can read.
- Recent computers and favorites: ID, name, operating system, last connection time, star and nickname. No codes or passwords.
- Permanent password: in the keychain, as a derived key only.
- Remembered passwords: only for favorites where you ticked “Parolayı hatırla”, in the keychain.
- us2usmail.com session: in the keychain; “Çıkış yap” (sign out) revokes it on the server and deletes it.
What we don’t do
The app has no analytics or usage statistics. It talks only to the relay and, if you signed in, the us2usmail.com accounts service. We don’t sell data and we don’t show ads.
Contact
Questions go to support@us2us.app. Don’t include passwords, codes or other people’s private data. This page is not a regulatory compliance document or an independent audit.