Privacy Policy

Last updated:

This policy covers the P-Pass website (p-pass.hawkeye-xb.com), the P-Pass desktop app, and the P-Pass Android app. It explains what data we can see and what we can't.

Your photos and videos

Your photos and videos are sent from your phone to your own computer and stored on the computer where you installed P-Pass. We don't run servers that store user photos, and we have no way to view your photos.

Transfers and the relay

Connections between your devices are encrypted end to end. When your phone and computer can't reach each other directly, the encrypted data is forwarded through a relay server. The relay and device-discovery services currently in use are operated by number 0, the maintainers of the open-source networking library iroh. These services can see your devices' IP addresses and device identifiers (public keys). They can't see the content of your photos, and they don't store the data they forward.

Data collected by the apps

  • The desktop and Android apps currently send no usage data or analytics, and there is no automatic crash reporting.
  • The code includes an anonymous analytics feature that is turned off by default. If we ever turn it on, we'll say so in the release notes and give you a way to switch it off.
  • If we ever need a crash log from you, we'll ask first.

Diagnostic bundles

A diagnostic bundle is created only when you click "Export diagnostic bundle", and it's saved on your computer. Exported bundles are scrubbed automatically: home-folder paths are replaced, and device identifiers and pairing tokens are cut to their first 8 characters. We only see a bundle if you send it to us yourself.

Android permissions

  • Photos and videos: to back up the albums you choose.
  • Camera: to scan the pairing QR code on your computer.
  • Notifications: to show backup progress and tell you when a backup fails.
  • Network, background activity, start on boot, and battery-optimization exemption: to finish backups automatically in the background.

This website

This website uses no analytics scripts, cookies, or third-party trackers. It is hosted on GitHub Pages, and installers are distributed through GitHub Releases, so GitHub processes access logs as the host under its privacy statement. The Chinese version of this site links to a download mirror on Cloudflare (p-pass-dl.hawkeye-xb.com); downloads from the mirror are logged by Cloudflare under its privacy policy. The download numbers we see are only the totals GitHub Releases and Cloudflare provide.

Changes to this policy

When this policy changes, we update the "Last updated" date on this page. Any change to how data is collected will also be called out in the release notes.

Contact

Questions about this policy? Open an issue on GitHub Issues.