Privacy Policy

What we collect

With Settings → Core → Send Diagnostics on (the default), the app sends the following to Sentry (sentry.io, US region) to find and fix problems:

• Crash reports: stack traces, exception type and reason, versions, device model, OS version, and the network extension's latest log (up to 1 MB).
• Hang reports: samples and stacks when the interface freezes.
• Memory reports: memory history and snapshots when the network extension nears its memory limit, which may include the connection list at that moment (destination domain or IP, port, traffic).
• Error messages: the text of errors shown in the app, with the action and error code; these may contain server addresses, domains and ports.
• Breadcrumbs: screens and buttons used before an error.
• Technical details: app and core versions, OS version, device model, locale, and a random installation ID generated by Sentry.

What we don't collect

• Configuration files and the accounts, passwords and keys in them are never sent.
• Passwords, keys, tokens, credentials in share links, and user names, passwords and query parameters in URLs are masked before anything is sent.
• Screenshots, contacts, location. We don't collect browsing content or request bodies.
• We don't use diagnostics for advertising, and don't sell or share them with third parties (other than Sentry as processor).

Retention and deletion

Diagnostics are kept by Sentry for the period of its plan (30 to 90 days). To have them deleted earlier, email duckbox@limitwatch.app. Turning the switch off stops sending immediately; crash, hang and memory reports then stay on your device only, where Tools lets you view and delete them.

Contact

Privacy questions or deletion requests: duckbox@limitwatch.app.