Confidentialité et clause de non-responsabilité

This page explains what AnyRemote sends over the network, what it never does, and on what terms the software is provided. It is written in plain language, so that every statement can be verified.

In short

• The app collects no telemetry and no usage statistics.
• Your screen image, files and clipboard travel directly between the two computers. When a direct path cannot be established (strict NAT at a mobile carrier or in an office network), they go through our relay — encrypted, so it cannot read them. Details below.
• There is no hidden way into your computer: a session starts only after you accept it — or if you yourself enabled “do not ask when connecting” in the settings.
• No ads, no trackers, no sharing of data with third parties.

Exactly what goes over the network

This is the complete list — the app makes no other requests:

1. Signaling server (wss://anyremote.ru/ws). At startup the app asks for a number (a 9-digit ID) and keeps the connection open so that you can be reached. Only service messages travel here: a connection request and the answer to it, WebRTC technical data (SDP and ICE candidates — they contain the addresses of your network interfaces, which is unavoidable for a direct connection), the end-of-session message, and a check of which entries in your address book are currently online.
2. Account area (https://anyremote.ru/api/…) — only if you create an account. In that case the server stores your e-mail address, your password as an irreversible hash (bcrypt), your address book (names and IDs of computers) and the IP address the registration came from. Without an account none of these requests happen at all, and the address book stays on your own disk.
3. Update check — a request to /api/version at startup and then every five minutes. It carries nothing but the request itself: no data about you and no data about your computer. The update file is downloaded from the same website and only after you agree.
4. Feedback — sent only when you write a message and press “Send”: the text of the message and, if you are signed in, your e-mail address so that we can reply.
5. Google public STUN server (stun.l.google.com:19302) — needed so that two computers can find each other through home routers and NAT. It sees the IP address of your connection; nothing else is sent there.
6. Our relay (anyremote.ru:3478, a TURN server) — a fallback for when a direct connection is impossible: at mobile carriers and in some office networks NAT is arranged so that the two sides cannot punch through to each other. Both sides then send data to the relay, which passes it on. The content stays encrypted between the participants (DTLS/SRTP): the relay forwards the stream but cannot read it, and stores nothing. Access keys are temporary and issued to the app for a few hours.

How the session itself is transmitted

The screen, mouse and keyboard input, transferred files and synchronised clipboard text travel between the two participants (WebRTC) and are encrypted end to end (DTLS/SRTP). Usually the connection is direct and our server takes part only while it is being established — it introduces the two participants. When a direct path is impossible, the data goes through our relay, but stays encrypted there too: we can neither view nor record the content of a session.

What the app never does

• never sends or stores on the server your screen image, screenshots, keystrokes, clipboard contents or file listings;
• collects no usage statistics and contains no analytics, advertising or tracking components;
• does not scan your disks and does not read files — the file manager shows your partner only what is opened in it during a session, and works only while the session lasts;
• does not turn on the microphone or camera — audio is not transmitted at all;
• does not run covertly: the tray icon is always visible, and autostart is enabled only by you in the settings.

What is stored on your computer

• settings, your permanent ID and, if you signed in, your login token — in the application data folder;
• a diagnostic log at Documents\AnyRemote\anyremote.log — it is there to troubleshoot problems, stays with you, and reaches us only if you send it yourself.

The website

Everything above concerns the program. The website has its own story, and it is told here without omissions as well.

• Yandex.Metrica. The public pages of the site (home, documentation, Downloads, this page and the like) carry a Yandex.Metrica visitor counter. It gathers anonymised statistics: how many people come, which pages and search queries brought them, what device and browser they use, how long they read. “Webvisor” is enabled in the counter — it records actions on the page: mouse movement, scrolling, clicks. This serves exactly one purpose: to see which sections are useful and where people fail to find what they need.
• Where the counter is absent. It is not placed in the account area (profile, address book, settings, feedback, admin) nor in the web viewer — that is, wherever your e-mail, the IDs of your computers or someone's desktop are on screen. Those pages do not enter the statistics at all.
• The counter has nothing to do with the program. The AnyRemote app does not contact Yandex or any other third-party service beyond those listed above. Session content cannot possibly end up in the statistics: it never passes through the website at all.
• How to opt out. The counter is blocked by any content blocker, by your browser's tracking protection, or by disabling JavaScript — none of which affects how the site or the program works. The data is processed by Yandex LLC under its own terms.
• Cookies are used for three things: keeping you signed in, remembering the chosen language, and the Metrica counter.
• Like any web server, nginx keeps a technical access log (IP address, time, page address) — it is needed for diagnostics and abuse protection.
• The markup contains a site-ownership verification meta tag for a search engine: it tracks nothing.

How to verify all this

Do not take our word for it. Every request listed above is visible to any network monitor (Wireshark, Fiddler, your firewall's own tools): while idle the app talks only to anyremote.ru, and during a session it talks directly to your partner's computer. If you ever find a request that is not on the list above, tell us through the “Feedback” section — that would be a bug and it will be fixed.

Disclaimer

The software is provided “as is”, without warranty of any kind, express or implied, including warranties of fitness for a particular purpose and of uninterrupted operation.

The author accepts no liability for any consequences of using the software: for direct or indirect damage, lost profit, loss of or damage to data, disclosure of information, equipment downtime, or any other loss arising from the use of, or the inability to use, AnyRemote.

You are responsible for how you use the program. Connecting to someone else's computer is acceptable only with the knowledge and consent of its owner. Using AnyRemote for unauthorised access, surveillance or any other unlawful activity is forbidden and remains entirely the responsibility of the person doing it.

By downloading, installing or using the software you confirm that you have read these terms and agree to them.