Opsflare Privacy Policy

Opsflare is an independent, third-party mobile console for developers and operators that puts your Cloudflare accounts — domains, traffic, security, Workers, and storage — in your pocket, so you can check your production status on the go.

This Privacy Policy explains what data Opsflare (the "App", "we", or "our") handles, how it is stored, and the choices you have. We designed the App around a simple principle: your credentials and data stay on your device. We do not operate a backend server that receives your Cloudflare data.

Opsflare works directly between your device and Cloudflare's official API. The categories of data involved are:

• Cloudflare credentials — an OAuth authorization token or an API token you paste in. These are used only to authenticate requests to Cloudflare on your behalf. You never give the App your Cloudflare account password.
• Cloudflare account data — the domains, DNS records, analytics, security events, Workers, Pages, and storage resources (R2, KV, D1) returned by the Cloudflare API and displayed in the App.
• App settings — local preferences such as your selected language, light/dark theme, and the local passcode you optionally set to lock the App.

We do not collect your name, email, contacts, location, photos, or advertising identifiers.

All credentials and cached account data are stored locally on your device only:

• Cloudflare tokens are kept in the device's secure storage (iOS Keychain), never in plain text and never transmitted to us.
• The App can be locked with a local passcode and unlocked with Face ID / Touch ID (biometrics), so your credentials are protected even if your device is unlocked.
• All communication with Cloudflare uses encrypted HTTPS connections.

Because your data lives on your device, deleting the App removes the stored credentials and cached data from your device.

The data is used solely to provide the App's features: aggregating metrics across multiple Cloudflare accounts, showing 24-hour request curves, blocked threats and bandwidth savings, and letting you browse zones, DNS, SSL, cache, firewall events, Workers, Pages, and storage resources.

We do not sell your data, build advertising profiles, or share your Cloudflare data with any third party.

Opsflare communicates with the following third parties on your behalf:

• Cloudflare API — every account, analytics, security, compute, and storage request goes directly to Cloudflare and is governed by Cloudflare's Privacy Policy.

Opsflare is an independently developed third-party client and is not affiliated with Cloudflare, Inc. "Cloudflare" is a trademark of Cloudflare, Inc.

Opsflare only requests permissions needed for the features you use:

• Face ID / Touch ID — to unlock the App locally. Biometric data is handled by the operating system and is never accessible to the App.
• Network access — to talk to the Cloudflare API.

Credentials and cached data persist locally until you remove an account inside the App, sign out, or delete the App. Removing an account deletes its stored token and cached data from the device. We retain nothing on our side, so there is no server-side data for us to delete.

Opsflare is a professional tool intended for developers and operators. It is not directed to children and does not knowingly collect data from anyone under the age required by their local law.

We may update this policy as the App evolves. The "Last updated" date above reflects the most recent revision. Material changes will be communicated in the App or on this page.

Questions or requests about privacy? Reach out via the email below — we read every message.