A clear, honest data boundary.

How EasyDPI works

• Outbound TCP and UDP connections are evaluated locally only to distinguish HTTPS and QUIC traffic and to recognize known block-page addresses. HTTPS is relayed directly to the server you requested, not to an EasyDPI server.
• The first TLS ClientHello is inspected in memory and reframed as valid TLS records. Traffic content, domains, and endpoints are not stored as per-flow diagnostics.
• Legacy last-endpoint diagnostic keys written by earlier test builds are removed when the app or extension starts.
• QUIC/UDP 443 is rejected locally while protection is enabled so clients can use TCP/TLS.
• Language, theme, and menu-bar preferences, whether first-run setup is complete, and whether protection was on when the app last quit stay in the app container. That last value is used only while “Open at login” is on, to turn protection back on when the app opens. Protection configuration, extension status, time, and limited errors stay locally in the App Group.
• Only lifecycle events such as start, stop, and errors go to macOS Unified Logging; remote endpoints and hostnames do not.
• There is no automatic crash report, telemetry, or FormSubmit request.
• If your DNS answers a blocked site with a known block-page address, EasyDPI looks that site's name up again over encrypted DNS (DNS-over-HTTPS) at Cloudflare's 1.1.1.1 (1.0.0.1 as a fallback) and connects to the real address. Only the blocked site's name is sent, and only then; every other DNS lookup stays with your network. Answers stay in memory for at most five minutes and are never written to disk. Cloudflare's 1.1.1.1 privacy policy applies to these lookups.
• While protection is on, the app counts how many connections it reframed and how many came from each requesting app, and shows that breakdown in its own panel. Only the app's bundle identifier and a count are held, never the destination host or address. The counts stay in the App Group, reset whenever protection is switched on or off, and are never transmitted.
• macOS itself also stores the Network Extension preference for this app in System Settings and, if you turn on “Open at login”, its Login Items entry.

User-initiated support

The Feedback button opens an editable draft in your email app. It shows the app/build and macOS version. Nothing is sent to EasyDPI unless you press Send.

A support email you voluntarily send may be retained by email providers and the developer only as long as needed to respond and resolve the request. You can request deletion through the same address.

General terms

• There is no user account or identity request.
• There is no advertising, behavioral analytics, marketing profile, or cross-app/cross-site tracking.
• Local settings can remain until the app or related files are removed. Support and crash reports sent to the developer may be retained only as long as needed for support and defect resolution.
• Privacy, support, and deletion requests can be sent to [email protected].