Privacy Policy
English中文 · Terms of ServiceSupport
Privacy Policy
Last updated: 2026-11-05
PcapDecoder ("the App", "we") is a network packet capture and PCAP/PCAPNG traffic analysis tool. This policy explains what data we collect, why, and the choices you have. The headline: the App is local-first — your capture files and analysis results stay on your device and are never uploaded.
Summary
- Capture files are never uploaded. Parsing, statistics, expert analysis, threat matching, TLS decryption and report generation all run on-device.
- We store your account email (if you register) and your entitlement status. Local analysis works without any account.
- Only when you actively use cloud AI does the App send a small structured summary of your capture (≤8 KB: protocol distribution, anomaly counts, etc.). If you explicitly turn on content analysis in Settings, each request may additionally carry a sampled, redacted plaintext preview of your busiest conversations (≤200 characters per direction per flow, ≤4 KB total; authorization headers, cookies, API keys and password-like fields are masked on your device first). Raw capture bytes (hex), full capture files and unrelated packets are never sent.
- Purchases are billed by the store (Apple App Store / Google Play). We never see your payment card details — we only keep the verification result needed to grant your membership.
- The App contains no advertising and no third-party tracking SDKs, does not sell your data, and does not track you across other apps or websites.
1. Data we collect
Account data — the email address you register with and a hashed password; or, if you choose Sign in with Apple, the private relay email / identifier Apple shares with your consent. Apple-signed-in accounts have no password by default; you can set one later via an email verification code. Account data is held by our account platform service and used for sign-in, password recovery and cross-device entitlement sync only. Local analysis features need no account.
Anonymous device identifier — if you use cloud AI without signing in, the App generates a random UUID as a device identifier. Our servers keep only this identifier and its last-active time — it is not linked to any personal information, and clearing the App's data invalidates it.
AI inputs (cloud AI) — when you actively ask the cloud assistant or generate an AI report, the App builds a structured analysis summary of the current capture (packet/byte counts, protocol distribution, top talkers, TCP anomaly and DNS/TLS event statistics). By default this is ≤8 KB. Only when you explicitly select a specific packet or stream does the request additionally include that packet's parsed field tree or a reassembled stream preview. If you have explicitly enabled content analysis (off by default), the request also carries a sampled, redacted plaintext preview of your busiest conversations (≤200 characters per direction per flow, ≤4 KB total; authorization headers, cookies, API keys and password-like fields are masked on your device first; raw bytes and full files are excluded). This summary is forwarded via our servers to a third-party AI model provider solely to fulfill that request, and is not used for advertising.
BYOK (bring-your-own-key) — when you use AI with your own API key, requests go directly from your device to the endpoint you configured (OpenAI-compatible, Anthropic or Gemini). They do not pass through our servers. The key is stored solely in your device's system secure storage (iOS Keychain / Android Keystore / Windows credential protection).
Purchase data — purchases are processed by the store's in-app purchase system. We receive only the transaction verification results (transaction IDs, product identifiers) needed to grant your membership; we never receive your payment method.
Usage analytics — minimal first-party events: app first launch, sign-in success, paywall viewed, purchase started/completed, with timestamp, platform and app version (parameters ≤4 KB). They contain no capture content details. Raw events are retained for 90 days.
Diagnostics — server request logs (endpoint, time, status codes). Cloud AI relay logs record call metadata only (provider, model, success/failure, token usage) — never the conversation content. Optional crash reporting (Sentry) is active only in official release builds compiled with the corresponding configuration, and does not attach user identifiers by default.
2. What we do NOT do
- We never upload capture files. The service has no file-upload feature: PCAP/PCAPNG parsing, threat matching, port-knowledge lookup, GeoIP queries and report rendering all run locally on your device.
- No third-party advertising, analytics or tracking SDKs inside the App; no sale or rental of personal data; no cross-app or cross-website tracking.
- SSH remote capture is a direct connection between your device and your own server: the host, username and credentials you enter are used only for that connection (the App runs tcpdump on your server and streams the capture to a local temp file). They never touch our servers, and credentials live in session memory only.
- The App is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect children's data.
3. Third parties we rely on
We share data only with the following, only when needed:
| Party | When | What |
|---|---|---|
| Apple | Sign in with Apple; in-app purchases | Identity you authorize; purchase verification (receipt / transaction ID) |
| Google Play | In-app purchases | Purchase verification |
| Third-party AI model providers | You use cloud AI | That request's structured summary (≤8 KB, no raw bytes). If you enabled content analysis, also the sampled redacted plaintext preview described in §1. Currently providers include DeepSeek, Zhipu AI and Xiaomi MiMo; the pool is operator-configurable |
| Your chosen AI endpoint | BYOK mode | Direct device-to-endpoint traffic — not through us |
| Transactional email provider | Registration / password-reset codes | Your email address |
| db-ip.com | You update the GeoIP database (your device downloads directly) | A standard HTTP download request — no capture content |
| Hosting provider | Always | Encrypted storage and hosting of the service |
If the cloud-AI pool ever includes providers located outside your jurisdiction, request summaries are processed abroad under those providers' privacy policies; we disclose this here.
4. Storage, retention and security
Capture files, AI session history, favorites and threat lists stay in the App's private directory on your device. Sign-in tokens and BYOK keys are kept in system secure storage. Server traffic is transmitted over HTTPS. Cloud AI is relay-only: conversations are not stored server-side. Raw analytics events are kept for 90 days. When you delete data or your account, it is removed from production systems immediately and ages out of backups on the normal rotation. Access to production systems is restricted to the operators of the service.
5. Your rights and choices
- Access & correction: update your profile any time via Settings → Account.
- Manage subscriptions: in your Apple ID / Google Play subscription settings at any time.
- Deletion: Settings → Account → Delete Account offers two options — remove only this App's data and entitlements while keeping your account, or permanently delete your entire account (email, password hash and third-party identities are anonymized). Deletion is irreversible and takes effect immediately.
- If you cannot sign in, email us (below) from the address on your account to request deletion.
6. Changes
If this policy changes materially, we will announce it in the App and update the date above.
7. Contact
Questions or requests: email lingnanxinke@agent.qq.com.