PhoneRig - Privacy Policy
Last updated: 1 July 2026
PhoneRig turns a spare Android phone into a personal self-hosted server. This policy explains what limited data PhoneRig handles. In short: your website, files, and server content stay on your own phone and are never sent to us.
Who we are
PhoneRig is an independent app developed by a sole developer. Contact: support@phonerig.app.
What we process
A free or managed web address (only if you choose one). If you
opt for a free name.phonerig.app address or our managed custom-domain
option, our broker service stores the minimum needed to create and route that
address: an opaque per-install identifier (not tied to your identity), the subdomain
or domain you chose, a routing/tunnel identifier, the approximate country your address
was set up from (country only, derived from our network's edge - we never store your
city or your IP address), and - for subscriptions - a Google Play purchase token, plus
timestamps. This is used solely to set up and maintain your
address. Installs that go inactive are automatically deleted after about 60 days. If
you instead bring your own Cloudflare account or use Wi-Fi-only mode, no address data
is sent to us.
Abuse prevention. To keep the free service from being abused, our broker briefly rate-limits requests by network. Your connecting IP address is used only for this and is stored only as a salted, one-way hash (never in the clear) that is automatically deleted within about a day. It is not used to identify or track you.
Purchases. In-app purchases are processed by Google Play Billing. We receive your purchase/entitlement status to unlock features - not your card or payment details.
On your device only. Your sites, files, repositories, SSH keys, passwords, and any installed apps (e.g. WordPress) live on your phone. PhoneRig does not upload, read, or transmit this content to us.
How your visitors' traffic is routed
When you publish your server with a public address, visitor traffic is routed to your phone through Cloudflare's tunnel/CDN network, which processes it as our infrastructure provider under Cloudflare's own privacy terms. If you use your own Cloudflare account, that traffic is governed by your account.
What we do not do
- No advertising and no ad identifiers.
- No third-party analytics or behavioural tracking SDKs in the app.
- We do not sell or share your personal data.
Website analytics (phonerig.app)
The PhoneRig app contains no analytics. Separately, our marketing website at
phonerig.app can use Google Analytics to help us understand how visitors
find PhoneRig - but only if you allow it via the notice shown on the
site. If you decline or ignore the notice, no analytics runs and no cookies are set.
Your choice is stored in your own browser, and you can change it at any time by
clearing the site's stored data. Analytics data is collected with IP anonymisation,
is used only as aggregate statistics, and is processed by Google under
Google's privacy policy. Websites
that you host with PhoneRig are unaffected - we add no analytics to them.
Permissions
PhoneRig uses a foreground service (and asks for battery-optimisation exemption) so your server can keep running, and network access to route your traffic. These are used only to operate the server you started.
Data retention & your choices
Address records are kept while your install is active and removed after ~60 days of inactivity. To change or delete your managed address, or to request deletion of your address record, email support@phonerig.app. Uninstalling the app removes all on-device data.
Children
PhoneRig is not directed to children under 13.
Changes
We may update this policy; material changes will be reflected by the "Last updated" date above.