The short version. HTTrail runs entirely on your own device. It has no servers, no analytics, no accounts, and no telemetry. The network traffic it captures — including your most sensitive data — is stored only on your device, and we have no technical means to receive, see, or collect it.
Contents
1. Scope & who we are
This Privacy Policy explains how the HTTrail application ("HTTrail", the "App") and this website handle information. HTTrail is provided by Anusoft ("we", "us", "our"). It applies to the macOS and iOS versions of the App and to the HTTrail website.
HTTrail is a developer tool that acts as an intercepting HTTPS proxy and API client. It is designed so that you remain in sole possession of everything it touches. This policy describes that design in detail so you can verify it.
2. What we do not collect
We want to be unambiguous. The App does not:
- collect, transmit, or store any personal information on servers operated by us — we operate no such servers;
- include analytics, tracking, advertising, crash reporting, or telemetry of any kind;
- require an account, login, registration, or email address to function;
- contain embedded third-party SDKs that profile you or report your activity;
- sell, rent, or share any information with anyone — because we never receive any.
There is no "phone home." The App functions fully offline except for the network requests you direct it to make (see Section 5).
3. Data HTTrail processes on your device
To do its job, HTTrail processes network traffic that you choose to route through it. When you enable interception for a host, this can include highly sensitive material, such as:
- request and response URLs, methods, headers, and cookies;
- authentication tokens, API keys, and session credentials;
- request and response bodies (for example JSON, form data, HTML, and images);
- timing, status codes, and connection metadata.
All of this is processed and stored locally. Captured flows, request history, collections, environments, and saved settings are written to your device's own storage — your user Application Support directory on macOS, and the App's container (or shared App Group container) on iOS. None of it is transmitted to us or to any third party by the App.
Because this data lives on your device, you control it: you can delete captured flows, clear history, or remove the App and its data at any time using your operating system's normal tools.
4. Your certificate authority & keys
To decrypt TLS (HTTPS) traffic, HTTrail generates its own root Certificate Authority (CA) on your device and mints short-lived per-host leaf certificates signed by it. The CA's private key is created on your device and never leaves it. We never see it, receive it, or have a copy of it.
Important security note. Installing and trusting the HTTrail root CA on a device allows software on that device — including HTTrail — to decrypt HTTPS traffic for that device. Only install the CA on devices you own or control, keep its private key protected, and remove the CA when you no longer need to capture traffic. See the Terms of Use for more.
5. Network connections HTTrail makes
HTTrail makes outbound network connections only as a direct result of your actions:
- Proxying. When you route traffic through the proxy, HTTrail forwards each request to the origin server you were already contacting (for example, an API you are testing). That data goes directly to that third party, not to us.
- Replaying & composing. When you send a request from the composer or replay a captured flow, HTTrail contacts the destination you specify.
Any data you send to a third-party server in this way is governed by that server's privacy practices, not ours. HTTrail is the messenger you operate; it does not add us as a recipient.
6. This website
This website is a set of static pages hosted on GitHub Pages. It sets no cookies, runs no analytics, and loads no third-party fonts, scripts, or trackers. As with any website, the host (GitHub, Inc.) may automatically log standard technical information such as your IP address and browser user-agent in order to serve the pages and protect the service. That processing is governed by the GitHub Privacy Statement. We do not have access to individualized analytics about your visit.
7. Third-party services
The App embeds no third-party advertising, analytics, or tracking services. It is built on open-source software libraries (such as SwiftNIO and Apple's swift-crypto and swift-certificates) that run locally as part of the App and do not transmit your data anywhere.
8. Security
Because your captured data and CA private key live only on your device, their security is tied to your device's security. We recommend you use full-disk encryption, a strong device passcode, and operating-system account protections. Remember that decrypted traffic and the trusted root CA are sensitive; treat exported files (for example HAR exports or an exported CA) accordingly, since they may contain credentials.
9. Your responsibilities
HTTrail is a powerful interception tool intended for debugging traffic that you are authorized to inspect — your own apps, your own devices, and systems you have permission to test. You are responsible for using it lawfully and only on traffic you have the right to access. Please see the Terms of Use for the full acceptable-use terms.
10. Children's privacy
HTTrail is a developer tool intended for software professionals and is not directed to children. We do not knowingly collect information from children — indeed, we do not knowingly collect information from anyone.
11. International users
Because the App processes data only on your own device and we collect nothing, no personal data is transferred across borders by us. When you use the App to contact third-party servers, you direct where that traffic goes.
12. Changes to this policy
We may update this Privacy Policy from time to time — for example, to reflect new features. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page. Your continued use of the App after an update constitutes acceptance of the revised policy.
13. Contact
Questions about this Privacy Policy? Contact us at contact@anusoft.com.