Your devices. Your control.
Privacy policy
How HostTap handles information when you control your Windows computer from a paired phone.
Effective October 19, 2026
01What this policy covers
This policy covers the HostTap Windows receiver published by GUIHUI HU through Microsoft Store and this privacy website. The receiver is based on the open-source Sofatap project; its running interface may display “HostTap Remote.”
It does not describe other distributions, future services, or the privacy practices of your phone, keyboard, speech-recognition provider, or applications you control.
02Remote input and live editing
Mouse movements, button presses, keyboard actions, and text are sent directly between paired devices over TLS with certificate pinning. HostTap has no built-in cloud relay and does not send this input to a publisher-operated server. Devices usually connect on the same network, but the network route depends on your setup and is not guaranteed to stay only within a local network.
When you explicitly use live editing, the receiver can read the full text and selection of a supported native text field, send them to the phone, and synchronize your edits. Password, read-only, and unsupported fields cannot start live editing. Background focus hints contain field metadata, rather than field text. The receiver keeps field snapshots and acknowledgements temporarily in memory, releases them when the connection ends, and does not write field text to its logs or disk.
The Windows receiver does not provide screenshots or screen streaming, and it does not capture microphone audio. For dictation it receives text recognized on the phone; the phone, keyboard, and speech-recognition service have their own privacy practices. Applications you control may save or upload the text you enter according to their own settings and policies.
03Pairing and information on your computer
Pairing credentials, the receiver’s TLS identity, and settings are stored in the Windows user’s local application data. Credentials are protected using Windows DPAPI for the current user. Your computer name and network addresses are used to identify and connect to the receiver during pairing.
The receiver writes a pairing link to the clipboard only when you choose Copy Pairing Link. Windows clipboard history or synchronization may retain or share that link according to your Windows settings. Treat pairing links, QR codes, and credentials as private.
04Your controls and retention
Choose Quit from the receiver’s system-tray menu to stop it. Closing its window hides it while the receiver continues running. You can remove a saved pairing from the phone.
To replace the receiver’s saved pairing credentials, fully quit it and remove its local pairing configuration; it generates new credentials on the next launch. Local settings remain until removed. Uninstalling the app or removing local files does not guarantee that every Windows, clipboard, or backup copy is deleted.
05Microsoft Store, website hosting, and support
Microsoft Store. Microsoft distributes and updates this version of HostTap. Microsoft may process Store, installation, and diagnostic information under the Microsoft Privacy Statement.
This website. Cloudflare Pages provides HTTPS hosting. Cloudflare processes network and request information, such as IP addresses, to deliver and protect the website under the Cloudflare Privacy Policy. We add no advertising, tracking scripts, analytics, forms, or browser storage to this site. The hosting provider may process information or use cookies under its own policies.
Support. If you email kakahu@kakahu.org, GUIHUI HU receives your email address and the content you choose to provide, and uses them to reply and handle your request. Do not email passwords, pairing links, QR codes, pairing codes, private field text, or other sensitive information. We retain support correspondence for as long as needed to handle your request; you can email us to request its deletion. Email providers process and retain their own copies according to their policies and settings.
06Use and sharing of information
Remote-control data is processed between your paired devices. We do not sell it, send it to an advertising service, or use it to train AI. The third-party processing described above concerns Microsoft Store, website delivery, and support information you choose to submit. Information voluntarily provided to us may be disclosed if required by applicable law.
07Children
We do not knowingly collect children’s personal information through the receiver. Users control which devices they pair and what they enter or share through those devices.
08Changes and contact
We may update this policy when HostTap’s behavior or the services described here change. The effective date above identifies the current version.
For privacy questions or requests to delete support correspondence, contact GUIHUI HU at kakahu@kakahu.org.