Tunnel Browser1. Contact and scope
For Tunnel Browser privacy, support or data-handling questions, contact appsupport.ios@m2k.com.tw. This policy describes this independent product. DuckDuckGo's and other providers' privacy policies do not replace this policy.
2. Settings and browsing data on your device
The app or WebKit stores or processes SSH hosts, ports, usernames, host trust information, preferences, bookmarks, history, cookies and website data on your device. SSH passwords, private keys and similar authentication secrets are stored in the system Keychain. Do not send those secrets to support.
This version provides no developer-operated account or cloud-sync service. DuckDuckGo Sync, account, subscription, AI and built-in analytics/crash transmission integrations are disabled. Apple system backups, device analytics and other services you use are governed by their respective settings and policies.
3. Websites, search and SSH connections
Websites and search services receive the URLs, search terms, requests and interactions you choose to send. They may use cookies or other technologies under their own policies and are responsible for their own data handling.
When the Tunnel is enabled, your chosen SSH server receives information required for authentication and forwarding, including connection source, forwarding destinations and traffic characteristics. Server logs and retention depend on the administrator's configuration and policy. Whether website content is encrypted also depends on the destination and protocol, such as HTTPS. Use only servers you trust and are authorized to access.
The app does not supply an SSH server and is not a device-wide VPN. Normal connections are used when the Tunnel is not enabled. Safari, other apps, externally opened services, unsupported traffic, UDP and WebRTC should not be assumed to be protected by this SSH Tunnel.
4. NET capture and HAR/JSON exports
You enable NET capture within a tab to inspect diagnostic data available from WebView and page APIs. Records may contain URLs, query parameters, timing, status codes, headers, cookies, Authorization values, tokens, passwords and request/response bodies. Available diagnostic values retain their original contents; sensitive information is not automatically redacted in all cases.
Capture is handled within the app and is subject to partial-capture and local capacity limits. Export first creates a file in the app's temporary directory, then passes it to your selected sharing destination. Sharing may send data to another app, cloud storage, an email recipient or another third party. Review the contents before confirming. Exported copies are managed separately by their destinations.
5. System permissions and external services
Camera, microphone, location, photo saving, Face ID and speech recognition are used as needed for the relevant features, subject to system authorization and your actions. Manage permissions in iOS Settings. Voice search may send audio to Apple's speech recognition service. Websites and external services have their own policies; these system or external services are not guaranteed to use the SSH Tunnel.
6. Retention, deletion and your choices
You can stop NET capture and clear local data in the relevant browsing-data, downloads, saved-password and NET interfaces. Deleting an SSH host removes its settings and credentials saved by this app. Clearing browsing data does not erase SSH settings, all Keychain items or external files.
Temporary files may be cleared by the app or system; do not rely on them for permanent storage. Keychain items may remain after uninstalling an app, so delete SSH hosts you no longer need before uninstalling. Manage exported, shared or backed-up copies in their respective devices or services. Support cannot remotely access or erase data on your device.
7. Support email
If you contact support, we receive your sender address, message and any attachments you choose to provide. We use them to respond, troubleshoot and provide necessary follow-up support. We retain them for the period needed to handle support and necessary records. You may request deletion through the contact address above, subject to applicable law and reasonably necessary record retention.
Do not send passwords, private keys, complete authentication information or unreviewed diagnostics. App/iOS versions, reproduction steps and error messages without sensitive information are usually sufficient.
8. This website and Cloudflare
This site is hosted on Cloudflare Pages. We have not added advertising, analytics/tracking scripts, third-party fonts, sign-in or upload forms. Email links open your selected mail service.
To deliver pages, operate its services and provide security, Cloudflare may process IP addresses, requested URLs, timestamps and connection information under the Cloudflare Privacy Policy and service rules. Such hosting data does not mean the app automatically sends your browsing or NET records to us.
9. Policy changes
We will update this page and its revision date when our data practices change. For other app versions or third-party services, also review their relevant feature descriptions and policies. Contact the support address above with privacy questions.