Privacy Policy

HTTPGlass is made by Nutiverse. This page covers the HTTPGlass app for iPhone and iPad, the HTTPGlass app for Mac,buying a subscription or licence, and this website, because each handles data differently.

Your captured traffic

HTTPGlass captures and decrypts network traffic on your own device: your iPhone or iPad, or your Mac. None of it is ever uploaded, not to Nutiverse and not to anyone else, whatever you choose below. There is no cloud relay, no cloud sync and no account.

On iPhone and iPad, captured requests and responses, and the certificate's private key, are stored in the app's own sandboxed storage. You control the app's access to your traffic through the same iOS mechanisms as any other VPN app: a Personal VPN profile and a certificate trust setting, both of which you can revoke at any time in iOS Settings. App Lock can put Face ID, Touch ID or your passcode in front of the app.

On Mac, captured requests and responses are stored in~/Library/Application Support/HTTPGlass, along with the root certificate and its private key, which is kept in a file only your user account can read. While you capture, HTTPGlass changes your Mac's HTTP and HTTPS proxy settings to point at itself. It records the previous settings in the same folder first, and puts them back when you stop capturing or quit, or at the next launch if the app was closed unexpectedly. The root certificate is trusted for your user account only, and you can remove it from the app's Certificate screen at any time.

Analytics and crash reporting on iPhone and iPad

The iPhone and iPad app includes optional analytics and crash reporting (Firebase Analytics and Sentry). Both are off until you turn them on. The app asks once, on first launch, and collects nothing unless you accept. You can change your answer at any time in Settings ▸ Privacy, and turning it off also discards anything still queued on the device.

When you enable them, they report which screens and features you use, whether the certificate and VPN setup steps succeeded, and crash diagnostics, together with a random identifier the analytics SDK generates for the installation. Theynever include captured traffic: no hostnames, URLs, headers, bodies, query strings or certificates, not hashed and not truncated. Counts are rounded into ranges rather than reported exactly. The app does not use the advertising identifier, does not track you across apps or websites, and nothing is sold or shared. Sentry reports are processed in the EU.

Subscriptions on iPhone and iPad

HTTPGlass Pro on iPhone and iPad is an auto-renewing subscription handled by Apple's StoreKit. Apple processes the payment, and Nutiverse never receives your payment details. Apple sends our server standard subscription notifications (the transaction identifiers, the product, and whether the subscription is active, in a grace period, cancelled or expired). We store them so we can answer support requests and see the state of a subscription, and they contain no name, email address or captured traffic. You manage or cancel the subscription in iOS Settings, under your name and Subscriptions.

Crash reporting on Mac

HTTPGlass for Mac includes optional crash reporting through Sentry. It isoff until you turn it on. The app asks once, on first launch, and you can change your answer at any time in Settings.

When it's on, a crash report includes technical details of the crash, a short trail of what you did in the app just before it (for example, which feature you opened), and basic session data such as when the app started and whether it crashed. Itnever includes captured traffic: no hostnames, URLs, headers, bodies or certificates. The Mac app contains no advertising SDK, and nothing is sold or shared.

Licence checks on Mac

If you enter a Pro licence key, the Mac app sends that key to httpglass.com along with your Mac's name (the Computer Name in System Settings) and a hardware identifier for the Mac. They are used to count your activations against the three-Mac limit, and are stored with your subscription at Stripe, our payment processor. We don't keep a separate licence database.

While a licence is active, the app checks it at launch and about once a day, sending the key and the same hardware identifier. Deactivating a Mac in Settings removes its activation.

Update checks on Mac

Once at launch and then about once a day, the Mac app asks httpglass.com whether a newer version exists. The request contains no licence key, identifier or information about your traffic. Like any web request, it reaches our server with your IP address.

Buying a Mac licence

Payments are processed by Stripe. We don't see or store your card details. Stripe shares with us what we need to run your subscription, such as your email address, the plan, and its status. Your licence key is emailed to the address you gave at checkout, sent through our email provider, Resend. To change your payment method or cancel, contact us at support@httpglass.com.

The download link on this site redirects to the current release file, which is served by GitHub.

This website (httpglass.com)

This site uses Google Analytics 4 to understand which pages help people find and use HTTPGlass: page views, which download button was clicked, and similar aggregate behaviour. Analytics only runs after you accept the cookie banner. Declining keeps it off.

We don't place your email address, search queries, or other personal data in URLs, and analytics events never include your email, IP address, or the content of anything you searched for.

Children's privacy

HTTPGlass is a developer tool and isn't directed at children under 13.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page.

Contact

Questions about this policy or your data: support@httpglass.com.