privacy policy

Effective 26 October 2026.

The sbr app collects no data about you. It connects only to the servers named in the profiles you add, and keeps its logs on your device.

This policy covers the sbr app for iPhone, iPad, Mac and Apple TV, its tunnel extension and widgets, and the sbr command-line program.

what is collected

Nothing. The app has no account, no analytics, no advertising and no crash-reporting service, and there is no sbr server for it to talk to. No information about you, your device or your use of the app is sent to the developer or to anyone else.

what the app connects to

The app makes network connections only to addresses named in the profiles you add:

• the URL of a remote profile, when you add it and when it is refreshed;
• the proxy servers, DNS servers, rule-set URLs and test URLs the profile lists.

While the tunnel is connected, other apps' traffic passes through it and goes where the profile's rules send it. Those servers are chosen by you or by whoever gave you the profile, and their operators' own policies apply to that traffic.

There is one exception, which runs only when you start it: the diagnose checks in the logs tab fetch https://www.gstatic.com/generate_204, https://www.google.com/ and a 10 MB test file from https://speed.cloudflare.com, through the tunnel, to test it. While the tunnel is connected they also fetch https://speed.cloudflare.com/cdn-cgi/trace and the same page from https://[2606:4700:4700::1111] (Cloudflare's 1.1.1.1 over IPv6), which reply with the address and country the request arrived from, to show your exit address and whether IPv6 leaves outside the tunnel. These requests send no cookies and an empty User-Agent.

On iPhone and iPad the app uses the camera only while you scan a profile's QR code. The image is read on the device and is not stored or sent anywhere.

what stays on your device

Your profiles, the routing rules you add, the Wi-Fi networks you mark as trusted and the app's settings are stored on the device, in the app's own storage. Logs stay on the device: the tunnel writes to the system log, where connection destinations are marked private, and the app keeps a record of crashes and a periodic memory reading so it can explain why the tunnel stopped. None of this is uploaded. Deleting the app deletes it.

The app does not ask for your location. On iPhone and iPad it reads the name of the Wi-Fi network you are joined to so that you can mark it as trusted for auto-connect.

apple

If you have chosen in your device's settings to share analytics with app developers, Apple may give the developer crash reports and usage statistics under Apple's privacy policy. The app adds nothing to them.

this website

sbr.blit.cc sets no cookies, runs no scripts and loads nothing from other servers.

changes and contact

Changes to this policy are published on this page, and its history is in the source repository. Questions can be asked by opening an issue on GitHub.