Droidputer privacy policy

Effective 2026-10-09, updated 2026-10-12 (failed flashes as public GitHub issues) (app version 0.0.7 and later; earlier versions collect no usage data). Applies to the Droidputer Android app (com.droidputter).

What the app does with data

• USB link. Pixels, key presses and GPS sentences travel over the USB cable between the phone and the ESP32-S3 you plugged in. They never leave the cable.
• Location. When you tap "Start GPS feed", the app reads the phone's GNSS sentences and forwards them over USB to the connected ESP32-S3, so the app running there sees a GPS. Location is never stored and never sent to any server. The feed runs only while you keep it on and the app is on screen. The app asks for the location permission only when you start the feed.
• Builds. When you ask for a build, the app sends the GitHub repository name, the git ref and the build target to the Droidputer build proxy (droidputter-proxy.vercel.app), which runs the build on GitHub Actions in the public repository fcavalcantirj/droidputer. The request contains no personal data.
• Verdicts (optional, public). After a flash the app can report whether the firmware worked. Sharing is off until you agree in the app. When you agree, each report is published as a public GitHub issue and then in a public JSON file; it contains the app name, the firmware hash, the board name, works/broken, the date, an optional note, and an anonymous identifier generated on your phone (device- followed by eight hexadecimal characters). That identifier is random, is not derived from your device or account, and cannot be linked to you by us. You can keep verdicts on your phone instead; they then never leave it.
• Usage and crash reports (optional). On first launch the app asks whether to send anonymous usage and crash reports; nothing is sent unless you tap "Send", and the Connection screen turns it off again at any time. When on, the app sends events to PostHog Cloud (United States): app opened, catalog opened, build requested and its outcome, firmware flashed, ESP32 linked (its app and board name), minutes mirrored, verdict sent, ESP32 panics read off the USB wire, and app crashes (the stack trace). Each event carries the same random anonymous identifier described under Verdicts, the app version and the phone model and Android version. Never location, contacts, accounts, key presses or screen contents. While reports are on, build requests to the build proxy also carry that identifier so builds can be counted per phone. Aggregated numbers (never individual events or identifiers) are published on the public statistics page and, for failed flashes, in public GitHub issues in the Droidputter repository: the error message, the app, the app version and the phone model, as counts.
• Catalog and feeds. The app downloads the public catalog and verdict files from GitHub, the LauncherHub firmware list from api.launcherhub.net, and firmware binaries from the build proxy or from M5Stack's M5Burner CDN when you flash them. These are ordinary HTTPS downloads.

What the app does not do

• No account, no sign-in, no advertising. The only third-party SDK that sends data is PostHog, and only after you opt in to usage and crash reports (above).
• No access to contacts, files outside the app's own storage, camera, microphone or the network beyond the endpoints named above.

Data retention and deletion

Everything the app stores lives in its private storage on your phone (build list, downloaded firmware parts, your verdicts, the anonymous identifier, the sharing and usage-report consents). Uninstalling the app deletes all of it. Published verdicts are public records in the GitHub repository; to have one removed, open an issue at https://github.com/fcavalcantirj/droidputer/issues quoting the anonymous identifier. The same request removes that identifier's usage and crash reports from PostHog.

The statistics website

The public statistics page (droidputer.vercel.app, from 2026-10-10) uses Google Analytics 4 (measurement ID G-BQTBY7HTMP) to count visits and how the page is read: pages viewed, how far a page is scrolled, which sections come into view, clicks on its Google Play and GitHub links, the JSON/CSV downloads, the theme switch, opening the raw tables and which charts are hovered. Google Analytics sets first-party cookies (_ga, _ga_*) and receives what a browser normally sends (browser and device type, referrer, and an approximate location Google derives from the connection); Google states that Google Analytics 4 does not log or store IP addresses. The app itself does not use Google Analytics. To opt out, block cookies for the site or install Google's opt-out add-on: https://tools.google.com/dlpage/gaoptout

Children

The app is not directed at children and has no content or features aimed at them.

Contact

Felipe Cavalcanti, via https://github.com/fcavalcantirj/droidputer/issues.

Source: docs/PRIVACY.md in the project repository.