Privacy, security & support.

SECURITY DETAILS

A pointer position. That’s the whole payload.

The sender transmits a small JSON message over UDP on port 47000: a normalized x and y, the sender’s screen size, an active flag, and the selected pointer colour and shape. No screen contents, keystrokes, clipboard, or file data are ever read or sent.

The receiver draws a borderless, click-through overlay window. It ignores mouse events and cannot inject input, so it cannot move, click, or type on your Mac.

Accessibility and Input Monitoring permissions let the app read the cursor position and detect the ⌘ key globally. This prototype is not signed or notarized, and packets are not authenticated or encrypted. Use it only on networks you trust.

Read the first-launch guidance ↗

DEVELOPER & SUPPORT

A small, independent experiment.

ELTransfer is made by duuberian. It is an early prototype shared to test one interaction, and feedback shapes what happens next.

Found a bug, or want to suggest how the pointer should feel? Open an issue and include your macOS version, both Macs’ models, and what happened.

GitHub reports are public. Leave out private network details.

Get support or share feedback ↗

PRIVACY · UPDATED 26 SEPTEMBER 2026

What stays here. What gets sent.

On your Mac: The app stores only your local pointer colour and shape preference. It stores no history or pairing state. Diagnostic lines about connection state are printed to the system log while the app runs and are not sent anywhere.
On your network: While the sender holds ⌘ at a screen edge, it sends cursor positions to ELTransfer.local on your local network. The receiver listens on the same port. Other devices on the network could observe these packets; they contain only pointer position and appearance data.
Internet: The app makes no internet connections. There is no update check, no analytics, and no account.
This website: The demo runs entirely in your browser and sends nothing. The page has no analytics scripts or advertising trackers. It loads its font from Google Fonts, which receives a normal web request including your IP address and may keep service logs.
Questions: Use the public support link above. Information you include in a public report is visible to others, so leave out sensitive details.