Skip to content

Latest commit

 

History

History
35 lines (22 loc) · 1.59 KB

PRIVACY.MD

File metadata and controls

35 lines (22 loc) · 1.59 KB

zap.store Privacy

Does zap store know which npubs downlaod which apps?

The relay does not log but currently has access to the device installed apps when querying for updates.

Artifacts are requested directly from the source by default (e.g. github). This info is shown in the alert dialog on first install. There is a fallback to the zs blossom server (https://cdn.zap.store) though. In the future we should honor npub's blossom server list.

Does the app dev know which npubs download their app(s)? It is possible for file servers gather data and associate IPs with npubs AND share it with devs. Possibly and unlikely.

Does zapstore know the IP address of the users? The zap.store relay does not log IP addresses but there is no way for users to verify. Zap.store recommends all use a VPN, or Tor.

Is any other information observable by zapstore? Searches for apps are observable.

What/is any information recorded by zapstore? The zap.store relay records none. However this is not currently verifiable.

In what ways does zapstore use relays? In the future users will be able to switch relays, as each relay has its own privacy reputation.

Does zapstore use its own relay? Yes. wss://relay.zap.store.

How does zapstore know which app versions are installed on the user's device? Android allows querying for this information with a permission bundled in the app.

is there "delete all my info" functionality? No personal information is stored. A button to remove local storage will be available soon.

Questions, Feedback, and Discussion

Utilize zapstore/zapstore#40