Spiroshader™ home

Privacy policy

Last updated: 2026-11-04. Version 2.0.

This policy explains what personal data WiderUp LLC, 2909 S Wayzata Boulevard #1019, Minneapolis, MN 55405, United States (“WiderUp”, “we”) processes in connection with the Spiroshader™ application (the “Software”), and what the Software handles on your device or on your own network without sending it to WiderUp.

The short version. The Software has no WiderUp account, advertising, analytics or crash reporting, and it does not contact a WiderUp server. Normal use of the Software therefore sends no personal data to WiderUp. The store you bought it from processes data for purchases, ownership checks and its own features. Network and remote-control features that you choose to set up exchange data with devices that you select, and those exchanges never pass through WiderUp. If you contact us, we do process the information you send, as described in section 5. This policy is a notice, not a request for blanket consent to processing.

1. What the Software does not send to WiderUp

The Software does not do the following:

This section is about transfers to WiderUp. The store’s processing and the features you set up yourself are described in sections 3 and 4.

2. What stays on your device

The Software stores its settings, library database, playlists, ratings and favorites, screenshots, thumbnails, caches and log files in local folders on your device, described under “Configuration files” in the user guide.

Audio. Audio is analyzed locally to drive the visuals. On Windows, macOS and Linux, the Software by default listens to the audio your computer is playing (system audio); on macOS this requires your permission to record system audio. If system audio cannot be opened, the Software stays silent. A microphone or line input can pick up voices and other sounds around you. The Software listens to one only if you select it in the audio settings, and the Audio tab shows a note while such a source is selected. You can choose another source in the audio settings. The Software does not record or store audio. Live audio may nevertheless be transmitted to a follower if you enable synchronized playback (section 4).

Cameras and shared video. Camera capture stays off until you enable it on the device itself; no remote command can switch a camera on. While a camera is allowed, a preset, a playlist or a remote command that uses a camera can show its picture in the Output. If you set up video sharing (Spout on Windows, Syphon on macOS, PipeWire on Linux), the Software’s picture, which can include camera video, is made available to other applications on the same device, and video from those applications can appear in the Software’s picture. Those other applications may record or transmit the picture under their own settings and privacy practices; turning sharing off in Spiroshader does not delete copies they have already made.

Credentials. The network shared key you enter for the network features is stored in the local settings file in readable form so the Software can use it. It is not sent to WiderUp. Protect access to your device and user account accordingly. Use a unique key that you do not use as a password elsewhere. Anyone who obtains it and can reach the enabled network interface may be able to control the Software or receive network data.

Log files. On Windows, the Software keeps at most two log files of up to 4 MB each, the current one and the one before it, to help with troubleshooting; when the Software starts or the current log is full, the older file is replaced. A log can contain device names, folder paths, network addresses of other instances and remote controllers, and file names of presets and playlists. Logs stay on your device. They reach WiderUp only if you choose to attach them to a support request; please review them before you do. On macOS and Linux, the Software writes no log file of its own.

3. Store editions

3.1 Steam

If you use the Software through Steam, Valve Corporation processes data under its own privacy policy at https://store.steampowered.com/privacy_agreement/. The Software uses these Steam features:

The Software does not use Steam achievements, statistics, rich presence, screenshots, Workshop or performance reporting. It does not transmit your Steam account identity or your Steam Cloud data to WiderUp. WiderUp receives from Valve only the sales and aggregate reports Valve provides to publishers. We use those reports for accounting and to understand sales and product performance; we do not use them to identify individual players.

3.2 Apple App Store and Google Play

The following describes planned editions and applies only when the relevant edition is released. If you obtain the Software through the Apple App Store or Google Play, Apple or Google processes your purchase and the Software’s ownership check under its own privacy policy (Apple: https://www.apple.com/legal/privacy/; Google: https://policies.google.com/privacy). On iPhone and iPad, the Software by default plays and analyzes music files you choose with its own player; it uses the microphone only if you select it as the audio source, after the system has asked for your permission, which you can withdraw in the system settings. The Apple TV edition has no microphone and captures no audio; it is made to follow a desktop leader on the same network (section 4). On Android, the Software uses the microphone, after the system has asked for your permission, unless you select system audio; Android lets the Software capture the audio other apps are playing only after you confirm its screen-capture prompt, and only on Android 10 and later.

4. Network features you set up

Network features are off by default. They work only after you turn them on and set a network shared key of at least 16 characters.

Synchronized playback. If you set up synchronized playback, a leader copy of the Software exchanges data with follower copies on your network. The exchanged data can include audio (which may contain voices if a microphone is the input), timing, preset and playlist names, parameter and mixer changes, sprite commands, settings changes and the instance name.

Remote control (JSON-RPC). If you enable remote control, controllers on your network that know the shared key can read the Software’s state and send commands. A remote controller cannot switch a camera on or change which audio input is used.

Discovery of other instances. While a network role that accepts connections is on, the Software announces itself on your local network so that other instances can find it. The announcement contains a random identifier that is created anew at every start, the instance name you chose (or a label derived from that identifier), a network host name, its network ports, the roles that are on, its capabilities and protocol version, and a tag computed with the shared key. Other devices on the network also see the device’s network address from which the announcement is sent.

Security of these connections. The shared key is used to check that the other instance or controller knows it, and it protects each message against tampering. It does not encrypt the connection, so other devices on the same network may be able to observe the exchanged data, including audio. These connections do not pass through a WiderUp server and are designed for a trusted local network. See “Security and vulnerability reporting” in the user guide. Do not expose these interfaces directly to the public Internet. Use a trusted network and do not transmit sensitive audio over an untrusted network. If you use the Software to capture or transmit other people’s voices or images, you are responsible for providing legally required notices and obtaining permissions for your use.

5. Documentation, website and support

The built-in user guide is stored with the Software and does not fetch its text from WiderUp. Links in the Software (the website button, a preset’s source or license link) open in your web browser, and the visited site’s own privacy policy applies. Visits to spiroshader.com are covered by the website privacy policy at https://spiroshader.com/legal/privacy.

If you email WiderUp for support, privacy or another inquiry, WiderUp processes your email address, your message and anything you choose to attach (for example log files or screenshots) to answer you and keep appropriate business and compliance records. The website privacy policy describes that processing, including the legal bases, service providers, international transfers and retention. Please do not send passwords, keys or unrelated personal data in a support request.

WiderUp is the controller of the correspondence it receives. For EEA and UK purposes, we process support requests as necessary to perform our contract with you or take steps at your request before a contract; business-contact and general correspondence is processed for our legitimate interests in answering inquiries and managing our business. We process information needed to comply with legal duties, including qualifying privacy requests, on that basis, and retain information needed for legal claims for our legitimate interest in establishing, exercising, or defending those claims. Providing correspondence is voluntary, but without enough information we may be unable to answer your request. We do not use it for solely automated decisions with legal or similarly significant effects.

Correspondence is accessible to authorized personnel and the email, IT, and support providers identified in our website privacy policy, and may be disclosed to professional advisers or public authorities when needed for legal compliance or claims. We normally retain correspondence for no longer than three years after the matter closes, deleting unnecessary attachments sooner; particular records may be kept longer where a documented legal duty or claim requires it, and deleted when that need ends. You may request deletion at privacy@widerup.com, subject to these retention grounds.

WiderUp is based in the United States, so correspondence sent directly to us is received there. Where a transfer from an EEA, UK, or Swiss exporter to a recipient outside that territory requires a transfer safeguard, we use a legally available safeguard for that recipient and transfer, as described in our website privacy policy. You may contact privacy@widerup.com for the relevant safeguard information and a copy, subject to necessary redactions.

6. Sharing, security, retention and deletion

Sharing. WiderUp does not share personal data from the Software with anyone, because the Software sends it none. Data reaches third parties only where you direct it: your store, the other devices and remote controllers you connect, and the applications you share video with. Those parties handle it under their own terms. This statement concerns the Software’s own data flows, not the support correspondence and publisher reports described above. Stores also conduct their own processing under their policies.

Security. The Software keeps its data in your user account’s local folders, protected by your operating system’s access controls. Network connections between copies of the Software require the shared key and are protected against tampering, but not encrypted (section 4). No device or network can be guaranteed completely secure. For information sent to WiderUp, we use access restrictions and other technical and organizational measures proportionate to the information and risks.

Retention and deletion. Data the Software stores on your device stays there until you delete it, reset it in the Software, or remove the Software’s folders. Log files are replaced as described in section 2. Data synchronized through Steam Cloud is kept by Valve under Valve’s retention and deletion practices. Turning Steam Cloud off stops synchronization but does not necessarily delete existing cloud copies; use Steam’s available controls or contact Valve about deletion. WiderUp holds no data from the Software to retain or delete unless you send it to us, for example with a support request (section 5). Uninstalling the Software may leave settings folders, exported files, cloud copies, and operating-system backups behind. Delete those separately where desired.

Withdrawing permission. Where your operating system asks for permission to use the microphone, system audio, the camera or the local network, you can withdraw that permission at any time in its privacy settings. You can also switch off each network and camera feature in the Software’s settings. Withdrawal prevents future use of the affected feature but does not recall data already received or recorded by another device or application. An operating-system permission is not, by itself, consent to unrelated processing by WiderUp.

7. Children

The Software is not directed at children, and WiderUp does not knowingly collect personal data from children through the Software. Its normal operation sends no personal data to WiderUp. If you believe a child has sent us personal data, contact privacy@widerup.com so we can assess and address it, including deletion where required.

8. Your rights

Where the GDPR, the UK GDPR, the Swiss Federal Act on Data Protection (FADP) or another applicable privacy law gives you rights, those rights may include access, correction, deletion, restriction, objection, data portability, withdrawal of consent, and the right to complain to a data-protection authority. Which rights apply depends on the law and the processing involved. Where processing is based on legitimate interests, you may object on grounds relating to your situation. Where it is based on consent, you may withdraw consent at any time without affecting the lawfulness of earlier processing. You may complain to the supervisory authority where you habitually reside, work, or where you believe an infringement occurred, as permitted by the relevant law.

Because the Software sends WiderUp no personal data, WiderUp holds no personal data about you merely because you use the Software. Data stored on your device is under your control: you can view and delete it in the folders described in the user guide, or by uninstalling the Software and removing those folders. For data processed by your store, please contact the store. We will nevertheless respond to requests concerning information we do hold, including correspondence. We may request information reasonably necessary to verify identity, but will not ask you to create an account or send unrelated sensitive documents merely to make a request. For requests governed by the GDPR or UK GDPR, we normally respond within one month, with any permitted extension explained within that month.

WiderUp does not sell personal information or share it for cross-context behavioral advertising, as those terms are used in U.S. state privacy laws.

You can contact WiderUp about privacy at privacy@widerup.com.

9. EU/EEA, UK and Swiss representative

WiderUp has appointed DataRep as its data protection representative in the European Union and European Economic Area under the GDPR, in the United Kingdom under the UK GDPR, and in Switzerland under the FADP. You may contact DataRep about WiderUp’s processing of your personal data or to exercise your rights:

10. Changes to this policy

WiderUp updates this policy when the Software’s data handling changes. The version shipped with your copy of the Software describes that release. Any future feature that would send data to WiderUp will be described in this policy before that processing begins and, where the law requires it, will ask for your consent first. We will give a prominent notice before material changes take effect, including through the Software where the change affects its behavior. New purposes for information we already hold will be disclosed before that further processing and will use an appropriate lawful basis. A policy update alone does not authorize incompatible reuse or supply consent. Earlier versions will remain available at https://spiroshader.com/legal/app-privacy/versions.

11. Contact

WiderUp LLC, 2909 S Wayzata Boulevard #1019, Minneapolis, MN 55405, United States. Privacy questions: privacy@widerup.com. Support: support@spiroshader.com