What SkyPort does
SkyPort Agent sends a live picture of the screens you choose to share to the SkyPort app on your headset, plus your computer's sound if you turn sound on. The headset connects straight to your computer, over a USB cable or your local network. There are no accounts and no SkyPort servers.
Data that stays on your devices
SkyPort keeps all of this on your devices and sends none of it to us:
- Your screens and sound. They go from your computer to your headset only, and are not recorded or saved. Computer sound is off until you turn it on.
- Pairing records. Each side stores a secret key so it can recognise the other later. Your computer lists allowed headsets (and any computers paired with it): an ID, a name such as "Quest 3 (a1b2)", the key, and the pairing date. The headset keeps its own random ID and one key per computer.
- Settings. On the computer: its name and ID (the ID is based on its network name), your sound choice, a one-time encoder test result (graphics chip, display size), and a certificate used to encrypt Wi-Fi video. On the headset: picture adjustments per computer and your passthrough choice.
- Logs. SkyPort Agent keeps troubleshooting logs: computer and display names, headset IDs, local network addresses, and connection and performance details, never screen content. Each file stops at 20 MB, and only the five newest are kept. The headset app logs to the headset's system log, which only developer tools can read. SkyPort never sends these logs anywhere.
Uninstalling the headset app removes its data, and that data is excluded from Android backups. SkyPort Agent's files stay after uninstalling. To remove them, delete ~/Library/Application Support/@questscreen/agent-desktop (macOS) or %APPDATA%\@questscreen\agent-desktop (Windows).
Data that leaves your devices
SkyPort's own code sends nothing to us. We run no servers, and SkyPort has no advertising, analytics, or tracking of its own. Every connection SkyPort's code makes is between your headset and your computers.
Meta's software inside the headset app can still reach the internet:
- Meta (headset app). SkyPort runs on Meta's Horizon OS and is built with Meta's XR SDK. Meta and its affiliates may collect or receive information from the app, such as technical events from the SDK (for example that it started, its version, and the app's identifier), how often and how long the app is used, and crash reports. When SkyPort starts, it also asks Meta's software on the headset to confirm that your account owns SkyPort, as Meta's store requires. Meta collects this for its own purposes under its privacy policy, not on our behalf. Meta shows us summary usage statistics and crash reports about SkyPort in its developer dashboard. We use them only to fix and improve SkyPort. To ask about data Meta holds, contact Meta.
Your devices' own software, from Meta, Apple or Microsoft, follows its makers' privacy policies.
Permissions and why
- macOS Screen Recording: to capture the screens you share, and your computer's sound if sound is on.
- macOS Accessibility: not requested. It is what would let your headset's controller move your computer's pointer, and this version of SkyPort does not do that: SkyPort Agent ignores pointer events from the headset.
- Windows Firewall: SkyPort Agent accepts connections from your headset on your local network (TCP 38300 and 38301, UDP 3001). The installer adds a Windows Firewall rule for SkyPort Agent alone, so you are not asked, and uninstalling removes it. The portable version adds no rule, so Windows may ask you to allow it.
- Headset spatial data: requested only when you press Scan QR code, so the headset can read the pairing code on your computer's screen. The headset gives SkyPort only the code's text. SkyPort gets no camera images and does not load your room scan.
- Headset network access: to connect to your computers.
Passthrough is drawn by the headset's system, so SkyPort gets no camera images from it. SkyPort does not ask for your microphone, camera, location, or contacts. Meta's SDK lists hand tracking as optional, but SkyPort does not read hand data.
Security
- Pairing. A headset joins over Wi-Fi only after it scans the QR code in SkyPort Agent and someone at the computer clicks Allow. The code changes after each pairing and every 10 minutes. You can remove a headset at any time under Allowed headsets. A headset on a USB cable is trusted without pairing, and USB needs the headset's developer mode.
- Encrypted: Wi-Fi video (TLS, locked to your computer's own certificate; when that link is unavailable, video uses WebRTC instead), and Wi-Fi sound and control messages (WebRTC: DTLS and SRTP). Over Wi-Fi, each WebRTC connection's encryption is locked to the pairing key, so a device on your network cannot put itself in the middle.
- Not encrypted:
- Connection-setup messages on your local network: computer and display names, display sizes, local addresses, and session details, but no screen content. Each connection proves its pairing key, but other devices on your network can read these messages.
- Discovery announcements: once a second, SkyPort Agent tells your local network its computer name and ID, its local address, and whether a headset is connected.
- Video and sound over a USB cable.
Children
SkyPort is a productivity tool and is not directed at children. SkyPort does not ask for or collect personal information from anyone, including children under 13.
Changes
If a version changes what data leaves your devices, we will update this policy and its effective date before releasing it.
Planned: automatic updates for SkyPort Agent. The agent will then contact an update server, which will see your IP address, the agent's version, and your operating system. We will update this policy before that ships.