Data Governance & Security

Privacy Policy & Data Safety

Last Updated: October 31, 2026 Application ID: ly.curl.offline Contact: [email protected]

Core Privacy Principle: CURL.LY Offline operates entirely on your physical device. We do not collect, transmit, intercept, sell, or analyze your generated codes, typed payloads, Wi-Fi passwords, contact cards, or hardware identifiers. There are no remote tracking servers, third-party analytics SDKs, or cloud databases.

1. Architecture & Data Boundary

CURL.LY Offline was engineered from day one as a sovereign, air-gapped utility for iOS and Android. All barcode rendering (Code 128, Code 39, EAN-13, EAN-8, UPC-A, UPC-E, ITF, Codabar) and QR code generation algorithms execute within the local sandbox of the mobile device:

  • 0 Bytes Transmitted: Payloads typed into the application are transformed directly into SVG/Canvas paths via bundled client-side libraries (qrcode and jsbarcode).
  • Air-Gap Compliance: The software operates identically in Airplane Mode, offline warehouses, clean rooms, or environments without Wi-Fi or cellular networks.
  • No Remote API Fallbacks: Unlike web-based QR generators that call remote image APIs, CURL.LY Offline has no backend web service.

2. On-Device Storage & Local History

The application provides an optional local history feature to help users recall recently generated codes without re-entering data. This storage is governed by strict local security rules:

  • Isolated Sandbox: History records are stored exclusively in your device's private localStorage sandbox. No external application or cloud service can access this storage.
  • FIFO Cap (30 Items): The history buffer is strictly capped at a maximum of 30 entries. When the 31st item is generated, the oldest entry is permanently deleted automatically.
  • Sensitive Credential Masking: For Wi-Fi codes, sensitive network passwords are automatically masked with security bullets (••••••••) in visual history lists.
  • One-Tap Instant Wipe: A single tap on "Clear All History" in Settings permanently erases all saved items and resets local storage buffers immediately.

3. Zero Telemetry & No Third-Party Analytics

CURL.LY Offline contains zero tracking or telemetry SDKs:

  • No Product Analytics: No Google Analytics, Firebase Analytics, Mixpanel, Amplitude, or Segment trackers.
  • No Session Recording: No FullStory, LogRocket, or user interaction trackers.
  • No Cloud Crash Harvesters: No Sentry, Crashlytics, or Bugsnag background daemons sending device traces.
  • No Social Trackers: No Meta Pixel, TikTok SDK, or X tracking tags.

4. Mobile App Store Data Safety Declarations

In accordance with Google Play Store Data Safety and Apple App Store Privacy "Nutrition Labels," our official disclosure is:

Data Category Collected? Shared with Third Parties? Processing Type
Personal Info (Name, Email, Phone, vCard) No No Ephemeral Client-Side Only
User Content (URLs, Text, Wi-Fi Keys) No No Local Sandbox Storage (Max 30)
Financial / Payment Data No No Not Collected
Precise Location Data No No Not Collected (No GPS permissions)
Device Identifiers & Diagnostics No No Not Collected by CURL.LY

Google AdMob (Free Android App Version)

The free Android distribution utilizes Google Mobile Ads (AdMob) to display non-intrusive banner advertising:

  • No Code Interception: AdMob has zero visibility into the QR or barcode generator input fields or generated graphics.
  • Diagnostics Only: Any advertising data collected by Google is strictly governed by Google's Privacy Policy and includes standard pseudonymous mobile advertising identifiers (IDFA/GAID) and crash diagnostics.

5. Your Rights & Immediate Data Erasure (GDPR & CCPA)

Because CURL.LY Offline does not maintain servers or user accounts, you have direct, instantaneous control over your data:

  • Right to Erasure (Instant Wipe): Navigate to the Settings tab in the application and tap "Clear All History". This immediately purges all 30 stored records and credentials from your device sandbox.
  • Right to Restrict Storage: You can toggle "Save to History" off in Settings at any time to prevent new codes from being written to device memory.
  • App Uninstallation: Deleting the application through your operating system permanently destroys all local sandbox storage and cached configuration.

6. Children's Privacy (COPPA & Age Rating 4+)

CURL.LY Offline does not knowingly collect, store, or solicit personal data from children under the age of 13. The application is rated 4+ on Apple App Store and Everyone (3+) on Google Play.

7. Contact Information & Data Protection Inquiries

If you have questions regarding this Privacy Policy or wish to verify our offline architecture, you may contact our dedicated team directly: