Privacy Policy

Last updated: November 2026

In short: Sailmode doesn't collect your personal data. Your Mac's screen and sound, what you type and what you dictate go straight between your iPhone or iPad and your Mac, end-to-end encrypted. They never pass through a server of ours, because there is none. This website sets no cookies and doesn't track you; it only counts visits, without knowing who you are.

I. Privacy Policy for Sailmode

This part covers Sailmode for iPhone and iPad and Sailmode for Mac (together "the applications").

No account, no analytics, no tracking

The applications need no account and contain no analytics, advertising or tracking. We don't receive, store or sell any data about you or about how you use them.

Your screen, sound and input

Your Mac's screen and sound, your keystrokes, clicks and scrolling, and your clipboard travel directly between your iPhone or iPad and your Mac: over your own network, your own Tailscale network or a USB cable. The connection is encrypted end to end with TLS 1.3 and AES-256-GCM, and only your two devices hold the keys. Nothing is recorded. Your iPhone or iPad keeps the last picture of each paired Mac's screen and a picture of the Mac's model on the device, so the app never opens on a blank screen; they stay on the device and are removed with the app.

Pairing through iCloud

If you're signed in to iCloud, your iPhone or iPad and your Mac each save a small record in your own private iCloud database so they can find each other: the device's name, its network addresses, and the keys your devices use to recognize each other. These records are end-to-end encrypted with keys in your iCloud Keychain, so neither Apple nor we can read them. Apple stores them as part of your iCloud account under Apple's privacy policy. A device found this way still needs your approval on the Mac before it can connect.

Dictation

Dictation turns your voice into text on your iPhone or iPad, with Apple's speech models or, if you choose it, the Parakeet model. Your voice never leaves the device; only the text goes to your Mac, over the same encrypted connection. Parakeet is optional and downloaded once from Hugging Face (Hugging Face, Inc., USA) when you choose to download it. Like any server you download from, Hugging Face sees your IP address; no audio or text is sent. See Hugging Face's privacy policy.

Permissions

The applications ask for the permissions they need: the microphone for dictation and the local network to reach your Mac on iPhone and iPad; Screen & System Audio Recording and Accessibility on the Mac, so your iPhone or iPad can show the screen, play its sound, type, click and scroll. They're used only for these features, and you can turn each one off in Settings at any time.

Tailscale

If you use Tailscale to reach your Mac away from home, the connection runs through your own Tailscale network. Where your devices can't reach each other directly, Tailscale may relay the connection through its servers; it stays encrypted end to end and Tailscale can't read it. Tailscale's own privacy policy applies to Tailscale.

Updates for Sailmode for Mac

Sailmode for Mac checks for updates once a day and downloads them from GitHub (GitHub, Inc., 88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA). GitHub sees your IP address and the version of Sailmode you have, as with any download; nothing else is sent. You can turn this off with Check every day in Sailmode's settings.

App Store

Sailmode for iPhone and iPad is distributed through Apple's App Store, and any purchase is handled by Apple under Apple's privacy policy; we don't receive your payment details. If you've chosen to share analytics with app developers in the settings of your iPhone or iPad, Apple shares anonymous crash reports and usage statistics with us. You can change this in Settings → Privacy & Security → Analytics & Improvements.

Your Rights

Since our applications do not collect any personal data, there is no personal data to access, correct, or delete. If you have questions or concerns about your data in relation to our applications, you can contact us at support@licht.camera.

II. Privacy Policy for this Website

General Information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified.

No cookies, no tracking

This website sets no cookies and uses no tracking or advertising. To know how many people visit, it counts visits with Cloudflare Web Analytics. Besides our host, GitHub Pages, it loads only the video from Mux, two small open-source scripts from jsDelivr and Cloudflare's counting script, as described below.

Hosting

This website is hosted by GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA. When you visit it, GitHub logs and stores your IP address for security purposes, together with technical data your browser sends with every request, such as the page requested, the time of the request, the browser type and the operating system. We have no access to these logs. The legal basis is our legitimate interest in a secure, fast and efficient provision of this website by a professional provider (Article 6(1)(f) GDPR). GitHub has certified its compliance with the EU-U.S. Data Privacy Framework, on which transfers of your data to the USA are based. For more information, see the GitHub Privacy Statement.

Video (Mux)

The video on the home page is streamed by Mux, Inc., 88 Stevenson Street, San Francisco, CA 94105, USA. When the page loads, your browser fetches the video and its still image from Mux, which receives your IP address and technical data such as your browser type, as any video service needs them to deliver a video. We don't use Mux's viewer analytics. The legal basis is our legitimate interest in presenting our product attractively (Article 6(1)(f) GDPR). Mux has certified its compliance with the EU-U.S. Data Privacy Framework, on which transfers of your data to the USA are based. For more information, see Mux's privacy policy.

Scripts (jsDelivr)

Two small open-source scripts load from jsDelivr, a content delivery network operated by Volentio JSD Limited, England and Wales: Lisse, which draws the video's rounded corners, and, in browsers that can't play the video stream by themselves, the video player hls.js. jsDelivr receives your IP address and technical data such as your browser type in order to deliver them; it sets no cookies and doesn't track you. The legal basis is our legitimate interest in a fast and reliable website (Article 6(1)(f) GDPR). For the United Kingdom, the European Commission has decided that it protects personal data adequately. For more information, see jsDelivr's privacy policy.

Visitor Statistics (Cloudflare Web Analytics)

To see how many people visit this website, we use Cloudflare Web Analytics, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. A small script from Cloudflare reports each page view: the page, the website you came from, your browser, operating system and type of device, the country your visit comes from, and how fast the page loaded. Cloudflare Web Analytics sets no cookies, stores nothing in your browser, and according to Cloudflare doesn't collect or use your personal data or follow you across websites. We only see totals, never individual visitors. The legal basis is our legitimate interest in knowing how many people visit our website (Article 6(1)(f) GDPR). Cloudflare has certified its compliance with the EU-U.S. Data Privacy Framework, on which transfers of your data to the USA are based. For more information, see Cloudflare's privacy policy.

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. We would like to point out that data transmission over the Internet (e.g., communication by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Note on the Responsible Entity

The responsible entity for data processing on this website is:

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Duration of Storage

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons to store your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur after these reasons no longer apply.

Transfers to Third Countries

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or this occurs in the context of using third-party services or disclosure or transfer of data to third parties, this only takes place if it is to fulfill our (pre)contractual obligations, based on your consent, due to a legal obligation, or on the basis of our legitimate interests, and only in the presence of the special conditions of Art. 44 et seq. GDPR, such as an adequacy decision of the European Commission (e.g., for the USA under the EU-U.S. Data Privacy Framework) or standard contractual clauses.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

If the data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims (objection under Art. 21 para. 1 GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling to the extent that it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection under Art. 21 para. 2 GDPR).

Right of Appeal to the Competent Supervisory Authority

In the event of breaches of the GDPR, data subjects have a right of appeal to a supervisory authority, in particular in the member state of their habitual residence, their place of work, or the place of the alleged infringement. The right of appeal exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data that we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the change of the address line of the browser from "http://" to "https://" and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Information, Deletion, and Correction

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of data processing, and, if necessary, a right to correction or deletion of this data. For this purpose, as well as further questions on the subject of personal data, you can contact us at any time.

Right to Restriction of Processing

You have the right to request the restriction of processing of your personal data. You can contact us at any time for this purpose. The right to restrict processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of processing of your personal data.
• If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.
• If you have lodged an objection according to Art. 21 Para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from being stored – may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

Contact via Email

If you contact us by email, your request, including all resulting personal data (name, request), will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent. The processing of this data is based on Article 6 (1) (b) GDPR, if your request is related to the fulfillment of a contract or is necessary for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of requests addressed to us (Article 6 (1) (f) GDPR) or on your consent (Article 6 (1) (a) GDPR) if this has been requested. The data sent to us via contact requests remain with us until you ask us to delete, revoke your consent to storage, or the purpose for data storage lapses (e.g., after completing your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Online Presence in Social Media

We maintain online presences within social networks and platforms, such as our profile on X, to communicate with active customers, prospects, and users there and inform them about our services. When calling up the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply. Unless otherwise stated in our privacy policy, we process users' data as long as they communicate with us within social networks and platforms, e.g., write posts on our online presences or send us messages. The link to our profile on X on this website is a plain link: X receives no data from this website unless you follow it.

Objection to Promotional Emails

The use of contact information published under the obligation to provide a legal notice for the purpose of sending unsolicited advertising and informational materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam emails.

Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date. Your continued use of the applications after any changes constitutes your acceptance of the revised policy.