Privacy & data

What this service handles

The service processes VRChat OSC parameter paths, display names, types, and current values so it can show controls in a browser and relay changes to the connected client. It does not request a VRChat account or password.

Session links

The client receives a random session token. Anyone with the tokenized link can view and change that session's registered parameters. Treat the link like a password and share it only with people you trust. Disconnecting the owner normally removes the session; if the owner process stops unexpectedly, the Redis session lease expires after 90 seconds without renewal.

Storage and retention

Active session data is stored in the service's Redis instance and is removed when the owner disconnects or its lease expires. Redis persistence is enabled by the deployment, so storage is managed on the host running this service. The service also writes operational logs, including request addresses and parameter paths, to container output. Log and backup retention depends on the hosting configuration.

Network providers

Requests pass through the configured reverse proxy and may pass through Cloudflare. Those providers and the server operator may process connection metadata such as IP addresses under their own configurations and retention policies. This project does not control their logs.

Browser data

The control page does not create an account, use analytics, or set application cookies. Parameter values are held in page memory while the page is open and are sent over the WebSocket connection.