Privacy Policy

Last updated: 27 December 2025

1. Controller

The controller responsible for data processing in connection with this app is:
Felix Krebs
Rotweg 38, 71686 Remseck am Neckar
Email: xdcobra11@gmail.com

2. Overview

Fluttida is a developer tool app for testing different network stacks and SSL pinning configurations. You can use Fluttida without registration and without creating a user account. This privacy policy explains which data is processed when you use the app and for which purposes.

3. Data collection and processing

3.1 Data processed locally by the app

The app stores the following information exclusively on your device:

• SSL pinning configurations: Your saved pinning settings are stored only locally on your device.
• App settings: Preferences and configurations for network tests (e.g. selected stacks, target URLs, header configurations).

These locally stored data are not accessed by us as the provider and are not transmitted to our own servers. We only process personal data if you contact us directly, for example via email.

3.2 Advertising via Google AdMob

This app uses Google AdMob to display ads. For users in the EEA/UK/CH, the service is provided by Google Ireland Limited; in other regions, it may be provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Data that may be processed by Google AdMob in particular include:

• Advertising ID of your device (e.g. Android Advertising ID)
• IP address
• Device information (device type, operating system version, language settings)
• App usage data (e.g. which ads are shown or clicked)
• Approximate location data (e.g. derived from the IP address), where applicable

Purposes of processing by AdMob: Serving and measuring ads, reach measurement, fraud prevention, improving the services and – where applicable – serving personalised ads based on your usage and interests.

Legal basis: Where required (in particular for users in the European Economic Area, the United Kingdom and Switzerland), we obtain your consent before using personalised advertising. In those cases, processing is based on your consent (Art. 6(1)(a) GDPR). In other cases, processing is based on our legitimate interest in financing and operating the app through advertising (Art. 6(1)(f) GDPR).

For users in the EEA/UK/CH, consents are obtained in accordance with Google’s EU User Consent Policy via an appropriate consent framework (e.g. Google User Messaging Platform / UMP SDK or a compatible Consent Management Platform). If you do not give consent to personalised ads, only non-personalised ads are shown or ads are suppressed.

Google privacy information:
Further information on how Google processes data in connection with AdMob can be found at:
https://policies.google.com/privacy
Information on how Google uses data from apps and websites that use Google services can be found at:
https://policies.google.com/technologies/partner-sites

Opt-out from personalised ads:
You can disable personalised advertising, for example in the Android settings, such as:
Settings → Google → Ads → “Opt out of personalised advertising” (labels may differ depending on the Android version). You can also reset your advertising ID in your device settings.

3.3 Network requests and target servers

The app sends HTTP(S) requests to URLs that you enter or select in order to test different network stacks and compare their behaviour. The content, destination and frequency of these requests are determined solely by you as the user.

The resulting request and response data (including headers and response bodies) are processed only on your device, for example to display results and logs within the app. These data are not stored or logged on our own servers.

Please note that the privacy policies of the respective providers apply to the target servers you choose (e.g. APIs, websites, your own test systems). You are responsible for ensuring that you do not send unlawful or sensitive personal data to third-party servers.

4. Permissions

The app requires the following permissions in particular:

• Internet access: To perform network tests, fetch content and serve ads.
• Network status: To check whether a network connection is available and which type of connection is used.

No additional “dangerous” Android permissions (such as access to contacts, camera, microphone or device storage) are used, unless explicitly stated in a future version of the app.

5. Disclosure of data to third parties

We only disclose your personal data in the following cases:

• Google AdMob: As described above, certain data are transmitted to Google in order to serve and measure advertising.
• Legal obligations: Where we are legally obliged to do so, we may disclose data to authorities or other third parties, for example in the context of statutory disclosure obligations.

6. Storage periods

• Local app data: Local configurations, saved requests, results and settings are stored only on your device until you delete them within the app or uninstall the app.
• Data processed by AdMob / Google: The storage periods for data processed by Google are determined by Google’s policies. You can find details in Google’s privacy policy (see link above).
• Communication via email: If you contact us by email, we store your request and the contact details you provide for as long as necessary to handle your request and as required by statutory retention obligations.

7. Your rights

You have the following rights under the GDPR with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object to certain processing (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights with respect to processing carried out by us, you can contact us at any time using the email address above. You may also exercise your rights regarding data processed by Google AdMob directly vis-à-vis Google.

8. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. This includes, in particular, limiting our own data processing to what is necessary and restricting access to any administrative interfaces.

The app itself uses the network stacks provided by the respective platforms (iOS/Android, libcurl/OpenSSL, WebView, etc.) for HTTP(S) requests. The security of transport encryption (e.g. TLS/SSL) therefore depends on the libraries used by the platform and on the target servers you choose.

9. Children

This app is not directed at children under the age of 13 and is designed as a technical test and developer tool. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and become aware that your child is using the app and has provided personal data, you can contact us so that we can review the situation.

10. Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in law, technical developments or changes to the app. The current version of this privacy policy is always available at the published URL. In the event of material changes, we will provide an appropriate notice within the app.

The “Last updated” date at the top of this document will be adjusted whenever we make material changes to this privacy policy.