Privacy Policy

Last updated: May 13, 2026

Introduction

Midori ("we", "our", or "the app") is an Xbox Remote Play and xCloud streaming client that allows you to stream Xbox gameplay to your Apple devices. This privacy policy explains how we handle your information.

Information We Collect

Information You Provide

  • Microsoft Account & Xbox Live Tokens: When you sign in with your Microsoft account, the app performs the standard SISU OAuth flow with Microsoft. The resulting Microsoft, Xbox Live (XToken / UToken / Title), and refresh tokens are stored securely in the iOS/macOS Keychain on your device. We do not transmit these tokens to any server we operate.
  • Console Information: Your registered Xbox consoles (console IDs, names, IP addresses, connection settings) are stored locally on your device to enable connectivity.
  • Preferences: Streaming bitrate, controller mappings, theme, and other settings are stored locally.

Information Collected Automatically

  • Network Information: Local network data necessary to discover and connect to your Xbox console.
  • Device Information: Basic device capabilities used to optimise streaming quality (e.g., display refresh rate, supported video codecs, decoder capabilities).

How We Use Your Information

All information is used exclusively to:

  • Establish and maintain connections with your Xbox console
  • Authenticate with Xbox Live for remote play and xCloud cloud streaming
  • Store your preferences and settings locally
  • Optimise streaming performance for your device

Data Storage and Security

  • On-Device Storage: Your saved consoles, settings, and authentication tokens are stored locally on your device, with tokens held in the Keychain.
  • No Proxy Service: Midori communicates directly with Microsoft and your Xbox console. We do not operate any proxy that sees your tokens or requests.
  • Logging: The app does not log authentication tokens. Any operational logs (e.g., errors, performance) stay on your device and are not transmitted to us.
  • iCloud Sync: If you have iCloud Keychain enabled, your Xbox Live credentials may sync across your Apple devices via Apple's infrastructure.
  • Encryption: All streaming data between your device and console is encrypted using the industry-standard protocols defined by the Xbox Game Streaming SDK (DTLS/SRTP over WebRTC).

Live Spatial 3D (Apple Vision Pro)

When you enable Live Spatial 3D, depth estimation runs entirely on-device using Apple Neural Engine and Metal. Video frames from your Xbox stream are processed locally to generate stereoscopic 3D for the Vision Pro display; they are never uploaded, transmitted, or otherwise shared with us or any third party.

Third-Party Services

The app communicates with:

  • Microsoft & Xbox Live: For authentication, console discovery, friends list, and xCloud session allocation. Your use of Xbox Live is subject to Microsoft's privacy statement.
  • Microsoft xCloud (Gaming Services): For cloud gaming sessions. Streaming sessions are allocated through Microsoft's cloud infrastructure.
  • Your Xbox Console: Direct peer-to-peer communication for streaming.

We do not use advertising or tracking services within the app.

Website Analytics: Our website (midoriapp.app) uses Plausible Analytics, a privacy-friendly analytics service that does not use cookies and does not collect personal data. No analytics are collected within the app itself.

Data Sharing

We do not sell your information. Your authentication and streaming data are transmitted directly between your device, your Xbox console, and Microsoft's services. We do not share your authentication tokens or Xbox Live personal data with third parties.

Your Rights and Choices

  • Delete Data: You can delete all app data by removing the app from your device, which clears tokens stored in the app's Keychain entries.
  • Credentials: Microsoft account credentials can be removed by signing out within the app.
  • Console Pairings: You can remove registered consoles at any time within the app.

Children's Privacy

The app is not directed at children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy.

Contact Us

If you have questions about this privacy policy or our privacy practices, please contact us at:

Email: [email protected]