Privacy policy

• What Windows reports as playing: the title, the channel or artist, whether it's playing, and how far into it you are. This comes from Windows' own media controls.
• The address of the tab at the front in Chrome, read from Chrome's address bar.

It doesn't read page content, your other tabs, your history or anything else. This information only goes to phones you've paired.

• The camera, only while you're scanning the pairing QR code. Nothing from it is stored or sent anywhere by the app. The scanner is Google's ML Kit, which runs on your phone; Google says ML Kit may send it basic metrics about how the scanner performs.
• NFC, to read and write Carrio tags, plus each tag's hardware ID for My tags.
• What you share to Carrio: if it's a YouTube video, the app sends its link and title to your paired PC to open. Anything else stays on your phone.
• Network access, to talk to your PC.
• Installing apps, in the version from this website only, so it can install its own updates when you say so.

The version from this website doesn't have notification access, so it can't see your notifications or what other apps are playing. That's the full list of its permissions: internet, network state, NFC, camera, vibration (for the little buzzes in the app) and installing its own updates.

The Play Store version, when it's out, will also ask for notification access, so Open on PC can see what the YouTube and YouTube Music apps are playing: the title, the channel and how far into the video you are. It'll explain why before it asks, it's optional, and it won't read your notifications. It won't install its own updates, because Play does that.

• On your PC: its settings, the phones you've paired (each one's name, and a hash of its key rather than the key itself), a list of videos you've handed off (title, channel and video ID, so it can find them again) and log files, all in your Windows user folders.
• On your phone: the paired PC's address and key, My tags (tag ID, name, what it does and when you last used it) and your settings.

On your phone, uninstalling the app removes it. On Windows, switch off Start with Windows in Carrio's settings, close it from the tray, then delete the app and the Carrio folders in %APPDATA% and %LOCALAPPDATA%.

• YouTube itself, when a video opens.
• Video thumbnails, loaded from YouTube's image servers.
• With the Play Store version's Open on PC, your PC may look a video up on youtube.com by its title and channel. Shared links don't need this.
• Update checks: now and then, the Windows app and the Android app from this website ask downloads.getcarrio.com whether there's a new version, and new versions come from there too.

The YouTube requests go to Google, under Google's own privacy policy. Update checks go to this site's download server, on Cloudflare. Nothing about what you watch or share goes to me.

Directly, over your local network. A one-time code pairs them, and after that each phone has its own key.

The connection between them isn't encrypted yet (it's plain HTTP), so only use it on a network you trust, like your home Wi-Fi. Either side can unpair whenever you like.

This site uses Cloudflare Web Analytics, which according to Cloudflare uses no cookies or local storage and doesn't fingerprint visitors. It tells me page views, referring sites, countries and device types. There's no cookie banner because there are no cookies.

Downloads are counted, including the updates the apps download: the file, the platform, the version, the country and the referring site, so I can see how the beta's going. The counter doesn't keep anything else.

Carrio isn't aimed at children under 13, and the apps don't send any personal data to me.

If anything here changes, I'll update this page and the date at the top.

Questions about privacy? Email hello@getcarrio.com.