Skip to content

Update privacy-policy.html #9

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chmikiro merged 1 commit into from
Aug 17, 2026
Merged

Update privacy-policy.html #9

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
55 changes: 40 additions & 15 deletions docs/privacy-policy.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,43 +22,68 @@
a {
color: #0066cc;
}

code {
background: #f2f2f2;
padding: 0.15rem 0.4rem;
border-radius: 4px;
font-size: 0.95em;
}

.meta {
color: #666;
font-size: 0.9rem;
}
</style>
</head>

<body>
<h1>Privacy Policy</h1>
<p class="meta">Last updated: August 16, 2026</p>

<p>Initially crafted to fill personal needs, Tunnel'd is now made public as a <strong>free, open-source software</strong>, with no commercial purpose, no monetization, and no ads.</p>

<p>Tunnel'd does not collect, store, or share any personal or sensitive user data externally. All data stays on your device unless you explicitly export it.</p>

<h2>Data Processing — Third-Party Services</h2>
<h2>Data Processing — User Controlled Third-Party Services</h2>

<p>Tunnel'd contacts the following services to function. Each request inherently includes your device's IP address as part of the TCP connection:</p>

<ul>
<li><strong>ipify</strong> (<a href="https://www.ipify.org/" target="_blank" rel="noopener noreferrer">ipify.org</a>) — determines your public IP address. ipify states they do not store or track request data. <a href="https://geo.ipify.org/privacy-policy" target="_blank" rel="noopener noreferrer">[Privacy Policy]</a></li>
<li><strong>ip2location</strong> (<a href="https://www.ip2location.io/" target="_blank" rel="noopener noreferrer">ip2location.io</a>) — geolocation (country, city, ISP, ASN, coordinates, timezone). <a href="https://www.ip2location.io/privacy-policy" target="_blank" rel="noopener noreferrer">[Privacy Policy]</a></li>
<li><strong>ipapi.co</strong> (<a href="https://ipapi.co/" target="_blank" rel="noopener noreferrer">ipapi.co</a>) — alternative geolocation provider. <a href="https://ipapi.co/privacy/" target="_blank" rel="noopener noreferrer">[Privacy Policy]</a></li>
<li><strong>ipinfo.io</strong> (<a href="https://ipinfo.io/" target="_blank" rel="noopener noreferrer">ipinfo.io</a>) — alternative geolocation provider. <a href="https://ipinfo.io/privacy-policy" target="_blank" rel="noopener noreferrer">[Privacy Policy]</a></li>
<li><strong>ipdia.li</strong> (<a href="https://leak.ipdia.li/" target="_blank" rel="noopener noreferrer">ipdia.li</a>) — DNS leak test. Runs on self-hosted infrastructure with no third-party analytics or tracking.</li>
</ul>
<li><strong>ipify</strong> (<a href="https://www.ipify.org/" target="_blank" rel="noopener noreferrer">ipify.org</a>) — used to determine your public IP address itself (IP identification, not enrichment). This is currently the only IP-identification provider; a future release will let you choose your own. ipify states they do not store or track request data. <a href="https://geo.ipify.org/privacy-policy" target="_blank" rel="noopener noreferrer">[Privacy Policy]</a></li>
<li><strong>ip2location</strong> (<a href="https://www.ip2location.io/" target="_blank" rel="noopener noreferrer">ip2location.io</a>) — enrichment provider: adds geolocation data (country, city, ISP, ASN, coordinates, timezone) on top of the IP address already identified. <a href="https://www.ip2location.io/privacy-policy" target="_blank" rel="noopener noreferrer">[Privacy Policy]</a></li>
<li><strong>ipapi.co</strong> (<a href="https://ipapi.co/" target="_blank" rel="noopener noreferrer">ipapi.co</a>) — alternative enrichment provider. <a href="https://ipapi.co/privacy/" target="_blank" rel="noopener noreferrer">[Privacy Policy]</a></li>
<li><strong>ipinfo.io</strong> (<a href="https://ipinfo.io/" target="_blank" rel="noopener noreferrer">ipinfo.io</a>) — alternative enrichment provider. <a href="https://ipinfo.io/privacy-policy" target="_blank" rel="noopener noreferrer">[Privacy Policy]</a></li>
<li><strong>ipdia.li</strong> (<a href="https://leak.ipdia.li/" target="_blank" rel="noopener noreferrer">ipdia.li</a>) — DNS leak test. Runs on self-hosted infrastructure with no third-party analytics or tracking.</li>
</ul>

<p>Which geolocation provider is used depends on your selection in Settings → Geo IP Data Source.</p>
<p><strong>IP identification</strong> <em>(via ipify)</em> and <strong>enrichment</strong> <em>(via ip2location, ipapi.co, or ipinfo.io)</em> are separate steps. Which enrichment provider is used depends on your selection in <code>Settings &gt; Geo IP Data Source</code>. You may disable enrichment entirely and only identify your IP.</p>

<p>By default, you can use Tunnel'd without any external network access — the app will still display your IP address and network type as detected by Android's system APIs.</p>
<p>By default, Tunnel'd is set to work without any external network access. The app will still display and locally log your IP address and network type as detected by Android's system APIs.</p>

<h2>Local Data Storage</h2>
<p>Tunnel'd stores your IP address history locally on the device using an on-device database. This data never leaves your device unless you explicitly choose to export it (CSV export to a location of your choice) or clear it (Settings → Clear History).</p>
<p>For visibility, an explicit "Cut internet access" toggle will be added in future release.</p>

<h2>Local Data Storage &amp; Retention</h2>
<p>Tunnel'd stores your IP address history locally on the device using an on-device database. This data is retained indefinitely until you explicitly clear it <code>Settings &gt; Clear History</code> or uninstall the app.</p>
<p>Data is yours, by design. So it naturally never leaves your device unless you explicitly choose to export it (CSV export to a location of your choice).</p>

<h2>No Analytics, No Telemetry</h2>
<p>Tunnel'd contains no advertising SDKs, no analytics frameworks, no crash reporters, and no telemetry of any kind. It is a standalone app — no account required, no backend to phone home to.</p>
<p>Tunnel'd contains no advertising SDKs, no analytics frameworks, no crash reporters, and no telemetry of any kind. It is a standalone, non-commercial app ; no account required, no backend to phone home to.</p>

<p>The only way to report bugs and/or to suggest features is by opening an <a href="https://github.com/chmikiro/tunneld/issues" target="_blank" rel="noopener noreferrer">issue</a> on GitHub.</p>

<h2>Consent</h2>
<p>By using Tunnel'd, you consent to your IP address being sent to the third-party services listed above solely for the purpose of IP address and geolocation lookups. You may opt out of geolocation lookups entirely by skipping the enrichment step or using the app offline.</p>
<p>Consent is granular and tied to your choices in Settings:</p>
<ul>
<li>Skipping IP identification and enrichment entirely (fully offline mode) means no data is sent to any third party.</li>
<li>Enabling IP identification (ipify) sends your IP address to that service only.</li>
<li>Enabling enrichment additionally sends your IP address to the specific provider you selected in <code>Settings &gt; Geo IP Data Source</code>.</li>
</ul>
<p>By enabling any of the above, you consent to your IP address being sent to the corresponding third-party service solely for the purpose stated. You can change or revoke these choices at any time in Settings.</p>

<h2>Contact</h2>
<p>For questions or concerns, open an issue at <a href="https://github.com/chmikiro/tunneld" target="_blank" rel="noopener noreferrer">github.com/chmikiro/tunneld</a>.</p>
<p>You also can send an email to <a emailto="chmikiro.tunneld@couldyoutellwho.im" target="_blank" rel="noopener noreferrer">chmikiro.tunneld@couldyoutellwho.im</a>.</p>
<p>For privacy-specific concerns, you can also send an email to <a href="mailto:chmikiro.tunneld@couldyoutellwho.im">chmikiro.tunneld@couldyoutellwho.im</a>.</p>
</body>


</html>