Privacy policy: local first, zero telemetry

DraftDraft — pending legal review. Not yet in effect; wording may change.

Version 0.2 (draft) · Effective: [TBD] · Last updated: 2026-11-05

This policy explains how the CCIso software and this website handle personal information. In one sentence: CCIso runs on your computer, does not decrypt, log or upload Claude content, sends no telemetry, and its activation and update requests carry only your install code and version number.

This English version is provided for convenience. If it differs from the Chinese version, the Chinese version prevails.

1. Who we are and how to reach us

  • Personal information processor: [TBD: name of the entity or person]
  • Email: [TBD]
  • Other contact details: see the site footer

If exit key files are supplied by a separate business, that business is responsible for the personal information it processes, and that processing is outside this policy.

2. What the software does on your computer (local, never uploaded)

  • CCIso forwards Claude’s network traffic to the exit you configured. That traffic is encrypted, and CCIso does not decrypt, log or upload your Claude conversations or code.
  • The status light, Check and Clean all run locally; their results are not uploaded. The software has no telemetry and no crash reporting.
  • Local logs stay on your computer and rotate after 7 days. We only see them if you click “Copy diagnostics” and send the bundle to us; it is redacted and contains no keys, tokens or full IP addresses.
  • Your proxy credentials and imported key files are stored in the system keychain (macOS Keychain / Windows DPAPI / Linux Secret Service). We cannot read them.

3. Network requests the software makes

Apart from the three kinds below, CCIso makes no network requests. Settings shows a count of every outbound request the software itself has made.

Request Sent to What it carries Can you turn it off?
Your configured exit Your own proxy, or your provider Claude’s encrypted traffic Stops when protection is off
Activation and licensing Our licensing service Only your install code and version number Yes; an activated licence is verified offline and keeps working
Update checks Our update service Only your install code and version number Yes; you then download new versions yourself

Whoever runs the exit (you or your provider) is responsible for where that traffic goes; we cannot see it and do not handle it.

Every network request carries the IP address of your current network — that is how networking works. The hosting services that receive activation and update requests may keep the IP address and time in short-lived access logs for security and troubleshooting; retention [TBD]. We do not use those logs to identify you.

4. Information we process for activation

Information Purpose Retention
Install code (the first 80 bits of the SHA-256 of this installation’s public key; identifies only this computer and contains no hardware information) Issuing, renewing and moving activation codes Until [TBD] after the activation expires
Activation records: install code, expiry, move count, time, notes Activation management, move counts, abuse prevention Until [TBD] after the activation expires

Legal basis: necessary to conclude and perform a contract to which you are a party (PIPL Article 13(1)(2)), and to meet legal obligations. CCIso collects no payments and processes no payment information.

5. This website

  • This site sets no cookies and loads no third-party scripts or fonts.
  • This site does not run visitor analytics. If that changes, we will only use cookie-free analytics provided by our hosting provider, and we will update this policy first.
  • The hosting provider keeps access logs (IP address, time, requested path, browser identifier) for security and operations. We do not use them to identify individuals.

6. Processors and disclosure

We do not sell or rent your personal information. To provide the service, the following third parties process limited information under their own terms:

  • Hosting and storage providers: this site’s host [TBD: Cloudflare, Inc. / Tencent Cloud object storage in Hong Kong] and GitHub for mirror downloads (access logs).

7. Cross-border transfer

This site and the activation and update services are hosted on servers in Hong Kong or outside mainland China [TBD]. Where this amounts to providing personal information outside mainland China, we will tell you the overseas recipient’s name, contact details, purposes, methods, the categories of information and how to exercise your rights with them, and obtain your separate consent as required by law [to be confirmed by counsel].

8. Your rights

You may access, copy, correct, supplement and delete your personal information, withdraw consent, ask us to explain our processing rules, and ask us to close your account (delete information linked to your activation, except what the law requires us to keep).

How: contact us using the details above, describe the request and give us something that lets us verify it (such as your install code). We reply within 15 working days. You can also turn off the activation and update requests in the app’s settings at any time.

9. Security

  • Credentials are stored in the system keychain, the forwarding configuration is passed in memory, and nothing is written to disk in plaintext;
  • licences are digitally signed and verified offline on your computer;
  • activation records are accessible only to the people who need them [TBD: storage and encryption];
  • if personal information is leaked, altered or lost, we will act immediately and notify you and the authorities as required by law.

10. Minors

CCIso is meant for adult developers. Children under 14 should not activate CCIso.

11. Changes to this policy

When this policy changes, we publish the new version here and tell you in the app. If the purposes, methods or categories of processing change, we will ask for your consent again.

12. Version

The version and effective date are shown at the top of this page.