Privacy Policy
Effective and last updated July 15, 2026
Overview
Poracode mobile is a companion for a Poracode desktop app that you control. It does not run product analytics or third-party crash reporting in mobile sessions, show ads, or sell personal information. This policy also explains the limited services used by the Poracode website and optional push notifications.
Data handled by the app
When you pair a desktop, the app stores connection details such as the desktop name and identifier, endpoint, access token, and your mobile preferences. It also receives and caches the projects, threads, terminal output, files, and settings that your paired desktop makes available. This data is used to provide the features you request.
Camera and QR scanning
Camera access is optional and is used only to scan a pairing QR code. Video frames are decoded on your device. Poracode does not record, store, or upload camera images or video. You can pair by entering the endpoint and token instead.
Desktop connections and storage
App requests and live updates travel between your device and the paired desktop. Native builds keep pairing credentials in the operating system's secure storage; the web app uses encrypted browser storage when supported. Removing a paired desktop deletes its saved connection data from the app.
Connections can use HTTPS or, in native builds, HTTP on a trusted local network. HTTPS encrypts data in transit; plain HTTP does not. Only use an HTTP endpoint on a network you trust.
Optional push notifications
If you enable notifications in a native app, the device receives an Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) token and sends it to your paired desktop. The desktop may send that token and notification content through Poracode's hosted service at poracode.com, which forwards the message to APNs or FCM. Notification content can include a project or thread name and status needed to show the alert; desktop privacy settings can redact identifying titles. Apple, Google, and Poracode's hosting provider process delivery data under their own terms. You can disable notifications or remove the paired desktop to unregister the device.
Website analytics
The public Poracode website uses Vercel Analytics and Speed Insights to understand aggregate site usage and performance. These website services are separate from the mobile companion session, where product analytics and remote diagnostics are disabled.
Sharing and retention
Poracode does not sell or rent mobile data or use it for advertising. Data is shared only when needed to connect to services you choose through the paired desktop, to deliver optional notifications, to operate the website, or when required by law.
Pairing data and cached content remain on your device until you remove the desktop or clear the app's data. Push registrations remain on the paired desktop until they are unregistered or removed. Hosting and notification providers may retain operational or security logs according to their policies.
If you email support or open a GitHub issue, Poracode receives the information you choose to provide and uses it to investigate the request and respond.
Security and children
Poracode uses access tokens and platform security features to protect connections and stored credentials, but no system is completely secure. Poracode is a developer tool and is not directed to children under 13.
Changes and contact
We may update this policy as Poracode changes and will publish the new effective date here. Questions or privacy requests can be sent to SDSLeon999@gmail.com.