Privacy and local processing

Privacy Policy

This policy explains how CellRoute handles information in the Android app, on this website and when users contact support. It reflects a local-first design and avoids collecting communication content.

1. Introduction

This Privacy Policy explains how information is processed in the CellRoute Proxy Android app and on cellrouteproxy.com. Privacy questions and requests may be sent to privacy@cellrouteproxy.com; technical and purchase support is available at support@cellrouteproxy.com.

2. Scope

It covers the Android app, the website, support interactions and production purchase-entitlement verification. Third-party services such as Google Play operate under their own terms and privacy policies.

3. Information processed by the Android app

The app processes network requests that the user or a client application deliberately sends to the phone’s local proxy. It also processes local configuration, cellular and ingress network status, connection state, traffic counters and operational diagnostics needed to provide the service.

4. Proxy traffic handling

CellRoute relays supported TCP bytes to requested destinations after authentication and policy checks. It does not transparently capture traffic, decrypt HTTPS, install a CA certificate or read TLS plaintext. It does not record request bodies, cookies, Authorization or Proxy-Authorization headers.

5. Connection metadata and traffic statistics

The app may keep local redacted connection records, connection timing, byte counts, aggregate traffic statistics and network-change events. These support status, troubleshooting and optional history features; they are not browsing-content logs.

6. Credentials and local settings

Proxy credentials and settings are stored on the device. Passwords are encrypted using Android Keystore-backed AES/GCM. Users can regenerate credentials and change or remove local configuration through the app.

7. Diagnostic logs

Diagnostic logs are stored primarily on the device and redact targets and identifiers. They exclude communication bodies, passwords, cookies, authentication headers, TLS plaintext and Google Play purchase tokens. Users choose whether to copy and send a redacted report to support.

8. Google Play Billing

Google Play processes purchases, payment methods, localized pricing, transaction state, refunds and account association. CellRoute receives purchase state needed to provide Premium but does not receive full payment-card details.

9. Purchase verification backend

When production entitlement verification is used, the app may transmit a Google Play purchase token and the minimum product or account-association data needed to verify Premium. The token is used only for entitlement verification, is transmitted over an encrypted connection, is not written to app or diagnostic logs, and is accessible only to systems and personnel that need it for verification, security or support.

10. Information processed by the website

The public website does not require an account. It is designed to deliver static content and, by default, does not include advertising, behavioral analytics, tracking pixels or forms that collect personal information.

11. Hosting and server logs

The infrastructure used to deliver the website may process basic technical records such as IP address, timestamp, requested path, response status and user agent. These records are used for delivery, reliability, abuse prevention and security, not to build advertising profiles.

12. Cookies and analytics

The current website does not intentionally set non-essential cookies and does not enable behavioral analytics. No cookie consent banner is shown because no optional cookie use is currently implemented. This policy must be updated before adding such technology.

14. Data retention

Local settings, redacted logs and connection history remain on the device until the user clears them, clears app storage or uninstalls the app. Support communications, security records, basic website logs and entitlement-verification records are kept only for as long as reasonably necessary to provide the requested service, protect the service, resolve disputes and meet legal obligations, then deleted or de-identified when they are no longer needed.

15. User controls and deletion

Users can stop the proxy, change credentials, clear local logs and history, remove app data through Android settings, or uninstall the app. Requests concerning support or entitlement-verification data may be sent to privacy@cellrouteproxy.com; identity may be verified before acting on a request.

16. Security

CellRoute uses authentication, Android Keystore-backed credential encryption, destination controls, redaction and least-data design. No system can guarantee absolute security; users must protect the phone, proxy credentials and local network.

17. Children’s privacy

CellRoute is not directed to children and does not knowingly seek personal information from children. If a parent or guardian believes a child has provided personal information through support, they may contact privacy@cellrouteproxy.com to request review and deletion.

18. International processing

Google Play and the infrastructure used for website delivery, support and entitlement verification may process information in countries other than the user’s. When required, appropriate contractual, technical and legal safeguards are used for cross-border processing.

19. Changes to this policy

This policy may be updated when the app, website or legal requirements change. Material changes will be identified on this page and communicated through the app or website when required by applicable law.

20. Contact information

Privacy requests: privacy@cellrouteproxy.com. Technical and purchase support: support@cellrouteproxy.com. Do not include proxy passwords, purchase tokens, cookies, authentication headers or private communication content in an email.