Privacy
no server, no analytics.
Nescroll has no backend, no analytics, no ads SDK and no third-party packages. Everything it stores stays on the device. You still need your own privacy policy, and you should know what the websites in the tabs do.
01What the app stores, and where
| Data | Where | Source |
|---|---|---|
| Filter switches, the chosen tab, the onboarding flag | App user defaults | Settings.swift, ContentView.swift |
| Daily counts of skipped items, last 30 days | App user defaults | Stats in Settings.swift |
| Last good remote rules | App user defaults | RemoteRules.swift |
| Screen Time selection (opaque tokens), lock end time, quiet hours, shield hits today | App Group user defaults, shared with the two extensions | LockShared.swift |
| Website cookies, storage and cache (the user's sign-ins) | The iOS web data store of the app | Browser.swift; deleted by "Sign Out of Everything" |
The app itself makes only two kinds of network request: the websites the user opens, and, if you set rulesURL, one GET for rules.json per launch, with no identifiers.
02App Store privacy label
Because the app code collects nothing and sends nothing to you or to any SDK, the usual answer in App Store Connect is Data Not Collected. The label is your legal statement, so confirm it against your final build: if you add analytics, crash reporting, purchases or anything else that sends data, update the label.
When users sign in and browse in the tabs, the sites collect data under their own privacy policies, as they would in Safari. Say this in your privacy policy, and that your app does not receive the passwords or the content.
03Your privacy policy
Write your own and publish it at the URL you put in AppConfig.privacyURL. It should cover at least: no account and no server; what is stored on the device (table above); that sign-in happens on the sites' own pages and their policies apply; the optional rules download and that your server sees an IP address in its logs; Screen Time data stays on the device and the app sees only tokens; how to delete data (Sign Out of Everything, or delete the app); your contact.
The package's privacyURL points to the author's own page for the author's own app. It is not a template for your legal text and must be replaced.
04Permissions the app may ask for
- Screen Time, when the user taps Allow Screen Time.
- Camera and Microphone, only when a website in a tab asks for them (for example to post a photo). Texts:
NSCameraUsageDescription,NSMicrophoneUsageDescriptioninproject.yml.
No location, contacts, photos library, tracking (ATT) or notification permission is requested.