Privacy policy

Last updated: 7 October 2026.

In short: Spooky does not collect, store or share your data. Everything stays between your own devices.

No servers, no accounts, no tracking

Spooky has no servers and no user accounts. The Mac app and the iPad and iPhone app connect to each other directly, over your local network or through Tailscale. Spooky contains no analytics, advertising or tracking code.

What travels between your devices

During a session the Mac sends its screen and sound to your iPad or iPhone, and your device sends back keyboard, pointer and touch input, the clipboard when you copy something, and, if you turn it on, its microphone. All of this travels encrypted, only between your paired devices, and is not recorded.

Pairing

When you pair a device, Spooky creates a key that only your devices know. It is stored in the Keychain and, so that your other devices find the Mac without scanning a code again, in iCloud Keychain and iCloud key-value storage under your own Apple Account, together with the Mac's name and network addresses. Apple handles this data under its own privacy policy; Spooky cannot read it from anywhere else.

Permissions

On the Mac, Spooky asks for Screen Recording (to show the screen), Accessibility (to move the pointer and type), local network access, and system audio (to play the Mac's sound on your device). On the iPad or iPhone it asks for local network access, the camera (only to scan the pairing code; no image is kept) and, if you turn it on, the microphone.

Diagnostics

The Mac app writes diagnostic logs about connection quality (for example frame rate and network delay) to your Mac only, in ~/Library/Logs/Spooky. They are never sent anywhere. You can delete them at any time.

Third parties

If you use Tailscale to connect away from home, Tailscale's own privacy policy applies to that service.

Contact

Spooky is published by Andrea Soda (Sokit Studio), the data controller for the processing described here. Privacy questions and requests: privacy@sokitstudio.com; support: support@sokitstudio.com.

Support requests

If you write to us, your email address and message are used only to answer you (legal basis: your request, art. 6(1)(b) and (f) GDPR) and are deleted within 24 months of the last exchange.

This website

This site uses no cookies, analytics or scripts. It is hosted by GitHub Pages: GitHub may log visitors' IP addresses for security, under its privacy statement.

Your rights

You can ask for access to, correction or deletion of your data, restriction of or objection to its processing, and portability, at the address above. You can also lodge a complaint with your data protection authority; in Italy, the Garante per la protezione dei dati personali.