MiniMatch device disclosures & terms of use
Notice version: 2026-10-17.15 · Maintained by an independent developerGoogle account sign-in
With your authorization, Google sign-in shares a stable account identifier, verified email and suggested nickname. Only openid, email and profile are requested, without Gmail, Drive or Contacts access. Authentication tokens are validated but not retained. First-time registration requires confirming a public nickname and our terms. A Google-verified matching email is associated with the existing account, preserving its data and permissions. For previously unverified accounts, the old password is disabled and all old sessions end. Conflicting Google bindings prevent automatic association. Temporary authorization data expires after 10 minutes and is removed. Account identifiers and email are private, used for account services and removed with the account.
Information service
MiniMatch displays Mac mini specifications, host quotes, network declarations, check records, contact links and reviews. Browsing and publishing device information are currently free. Hosts and renters arrange rental contracts, payment, delivery, inspection, refunds and support directly. The platform does not collect rent or hold funds in escrow.
Publisher responsibilities
Publishers must accurately disclose model, specifications, declared location, pricing, network type, sharing, availability and contact details, and keep them current. Quotes and dates are host-provided and should be reconfirmed. Both parties should clearly agree on power, network availability and maintenance during the rental.
Scope of checks
Device verification is optional. Unverified listings can be published, searched, contacted and matched to email alerts. A Verified badge is added only when a successful report matches the current listing and is within its seven-day validity period. Missing, failed, expired or outdated verification affects only the badge and does not automatically unpublish a listing. The one-time check compares software-reported Mac model, chip, memory, internal storage and system version with the observed outbound IPv4 address. Ongoing monitoring and SSH or RustDesk checks require separate, explicit owner authorization. Verified means only that one software report and observed check matched. It is not Apple hardware or residential certification, proof of physical location, or a guarantee of availability or third-party account safety. The platform may still restrict abusive listings.
Private access & accounts
Connection passwords are stored encrypted and used only for device checks authorized by the publisher. They are not displayed on public device pages. Hosts deliver rental connection details, RustDesk codes and passwords directly to renters. Renters sign in to their own third-party accounts. Both parties must comply with applicable software licenses and service terms.
Merchant contact links
Hosts provide their own public merchant website or contact link and description. Merchants manage external websites; check the domain, quote, fulfillment and support terms before visiting. The platform receives no payment callbacks, determines no payment success and does not automatically charge, settle or refund rentals.
Private message
Signed-in users may initiate text conversations with hosts who have public listings. Messages and read positions are stored in our database; the API restricts access to the two participants. Administrator status alone does not provide an interface for viewing others' messages. Messages are not end-to-end encrypted; maintenance or lawful requests may require necessary data access. Existing conversations remain after a listing is hidden. Either participant may block the other to stop both from sending. Do not send passwords, verification codes, payment details or sensitive credentials. Messages are retained until a verified account or data deletion request is processed. For complaints or abuse, provide the relevant content through Help. Discovered external websites have not joined and cannot receive private messages here.
Renter reviews
Reviewers must have actually rented the device and describe their experience truthfully. Each person may keep one updatable review per device. Reviews supported by completed historical platform records are labeled separately. Off-platform rentals are self-reported and transactions are unverified. Hosts may respond but cannot change the renter's score or text.
Saved devices & feedback
Signed-in favorites are stored in the platform database and separated by account. Guest favorites, comparisons and rental checklists stay in the current browser. Feature suggestions, usability reports and outcomes are visible only to the author and operations. They are not public reviews, and report counts do not automatically remove listings. Do not include passwords, tokens or full connection addresses. The rental checklist is a private reminder, not platform acceptance of a device.
Service & availability declarations
Hosts independently disclose availability, delivery estimates, permissions, bandwidth, traffic, maintenance assistance, extra costs, cancellation and cleanup terms. These are not device check conclusions. Availability confirmation lasts 7 days; expired confirmations or past expected dates become unconfirmed. Old declarations do not establish that a device is free or continuously online. Host profiles collect public information and listings; they do not verify identity or guarantee fulfillment.
System-discovered external sources
The external directory collects service links from public websites, marked as system discovered and not joined. Inclusion does not imply partnership, identity verification, device checks, endorsement or a guarantee. Websites and plans are not counts of available devices. Prices, stock and terms are determined by the original website. Viewing dates are not live device checks. Sources not reviewed for over 30 days are marked for update. Merchants can request corrections or removal through Help.
Privacy & help
Your registered name, email, salted password digest and sessions support account services. Public names, submitted provider profiles, reviews and replies are public. Sessions use HttpOnly cookies and usually expire after 7 days; guest shortlists, comparisons and checklists use browser storage. Device checks need separate authorization; connection credentials are encrypted. Feedback and help requests are private to the submitter and operations, or operations only for guests. Sounds and browser notifications require an open page and show no message contents. Unread message emails require a separate opt-in. Help contact emails support those requests; device emails require separate opt-in. Verified data access, correction, deletion and account closure requests can be submitted through Help. Closed help requests and completed or declined product feedback are cleared after 180 days. Other account and public records remain until a verified request or business need calls for removal. An independent developer operates this site on US servers; consider this cross-border storage before submitting information.
Unread message emails
Message emails are off by default and require explicit consent in account settings and a verified account email. We record the consent version and time, language and latest send time. Only messages received after opting in are eligible, after about 2 minutes unread, at most once per account per hour. Unread status, blocks and preferences are checked before sending. Emails only announce new messages and contain no chat text, other participant names or device details. Resend processes the recipient email and generic reminder for delivery. Disable reminders in account settings or confirm unsubscribe from an email; in-site messages and separate device subscriptions are unaffected. Reminder payloads are cleared after sending or cancellation, and delivery logs are retained for 180 days. Preferences and notified positions remain until a verified account or data deletion request is processed.
Device email subscriptions
Device email alerts are currently free and require explicit consent for selected preferences. We record your email, filters and target price, consent version and time, confirmation state and delivery records. No device alerts are sent before email confirmation. When enabled, Resend processes recipients and email content for delivery; otherwise subscriptions are only saved and shown as awaiting email setup. Alerts cover public owner listings, not external websites as live inventory. A device is repeated only at a new lower price, at most once per hour per saved search. Pause or unsubscribe in your account, or use the unsubscribe link as a guest. Provider acceptance does not prove delivery or reading. Delivery records are retained for 180 days. Pending and unsubscribed preferences are removed 180 days after their last update; active and paused subscriptions remain until unsubscribe or a verified deletion request. Confirmation links and unsubscribe tokens are not displayed in the admin dashboard.
Traffic analytics
We measure public page views, referring domains and device categories to understand site usage. A short session identifier in the current tab restarts after 30 minutes of inactivity; it is not used for cross-site or cross-device identification. Sessions are not unique people. Analytics tables do not store full IP addresses, emails, search terms or chat content. Admin visits, common bots and browser Do Not Track or Global Privacy Control requests are excluded. Security rate limits separately process temporary request addresses. Event details are kept for 90 days; only operations can view aggregate statistics, displayed in Beijing time.
Email verification & account security
Email registration requires email verification. Password recovery is available only for accounts with password sign-in enabled. Codes expire in 10 minutes, allow up to five attempts, are invalidated on resend and work only in the requesting browser. Verification digests and temporary browser credentials establish ownership; operators cannot view codes. Expired code records are removed after one day. Email code payloads are encrypted and cleared after sending or expiry. When enabled, Resend delivers verification emails and Cloudflare Turnstile validates human-verification tokens, request addresses and site information. Code requests have cooldowns and frequency limits. Resetting a password ends all previous account sessions; Google-only accounts must use Google sign-in. Email registration and recovery remain paused until email delivery and human verification are configured. Existing password and Google sign-in remain available.