Security & Privacy Architecture

1. Local Network Isolation (LAN Only)

PCDeck is built from the ground up to operate exclusively within your private local network (LAN) or direct phone Wi-Fi hotspot. It does not route screen frames, mouse coordinates, audio packets, or files through external cloud servers or third-party relays.

• Direct Socket Binding: The PC server binds locally to your private subnet IP (e.g., 192.168.x.x or 10.x.x.x).
• No Cloud Servers: Video frames and input events travel directly from device to device across your home router.
• Internet Independence: You can disconnect your router from the internet or use an isolated phone hotspot, and all PCDeck functions continue to work without disruption.

2. Zero Telemetry & Data Collection

Many remote utilities bundle analytics SDKs, session loggers, or mandatory cloud logins. PCDeck enforces strict data minimization:

• No User Accounts: No email, password, or profile registration is ever required.
• No Telemetry SDKs: Zero tracking beacons, crash uploaders, or usage profiling in either the Android APK or Windows executable.
• Zero Outbound Pings: The app never reports device fingerprints or activity logs to any remote endpoint.

3. Understanding Windows SmartScreen & Defender Warnings

When running the executable for the first time, Windows Defender SmartScreen may display a warning stating "Windows protected your PC". Understanding why this happens helps distinguish genuine threats from code-signing reputation mechanics:

A wireless trackpad and display tool naturally uses OS APIs to capture the desktop buffer, synthesise mouse/keyboard input, and open a local network port. To heuristic scanners without signature reputation, this combination resembles remote administration tools.

Rather than blindly bypassing warnings, we encourage verifying the software's binary hash independently before running it.

4. Independent Binary Verification (SHA-256)

You can verify that the binary you received is authentic and unmodified by checking its SHA-256 cryptographic hash against our official release.

Verifying in Windows PowerShell:

PowerShell verification command

Command	Purpose
Get-FileHash PCDeck.exe	Computes the SHA-256 hash of your downloaded file. Compare the output hash with the published release hash on our GitHub repository.

You can also upload PCDeck.exe or PCDeck.apk to VirusTotal to inspect analysis from over 70 independent antivirus engines.