Privacy Policy
Last updated 2 November 2026
This policy says what the Wireway app, the website at wireway.dev and the portal at account.wireway.dev send and keep. The controller of your personal data is the Romanian business entity that operates Wireway (business details redacted here, available on request). Contact: support@wireway.dev.
The short version
- The traffic you capture stays on your Mac. We never receive it, and license checks carry no host names, user names or traffic.
- Wireway Free sends nothing about you or your Mac. It needs no account, key or sign-in.
- A license sends a set list of details when you activate it, then checks in about every 5 minutes while Wireway runs. The table below has all of it.
- The app has no analytics, advertising or crash reporting.
What the app sends, and when
The app only talks to our servers in the cases below, over HTTPS. Like any connection, each one shows your IP address to Cloudflare and our server (see IP addresses).
| When | What is sent | Where |
|---|---|---|
| Every plan: fetching the plan table, when Wireway starts and every 6 hours | Nothing about you or your Mac: a plain request with no identifier or cookie. | licensing.wireway.dev |
| Starting a trial | The app only opens the trial page in your browser, and sends nothing itself. See Starting a trial. | Nothing from the app |
| Activating a license key (trial or Pro), once per computer, and again if the license file is lost or too old to renew | The license key; the install ID (explained below); a session ID, new each time Wireway runs; the Wireway version; and your system's operating system and version, processor architecture, number of CPU cores, amount of memory, time zone and language and region setting. | licensing.wireway.dev |
| License check-in: about every 5 minutes while Wireway runs with a license saved in it, including one that has ended | The license file (it holds the license ID, plan, install ID, its dates and a signature, not your email address); the session ID; the Wireway version; and the time zone. | licensing.wireway.dev |
| Wireway stops, with a license saved in it | The license file and the session ID, to record that the session ended. | licensing.wireway.dev |
| Removing this Mac from a license | The license file. | licensing.wireway.dev |
| Checking for updates: when you choose Check for Updates, or on a schedule if you turn on automatic checks (off by default) | A request for the update feed, with the app's name and version in its User-Agent header. No system profile and no license details. | updates.wireway.dev |
| Downloading an update you approve | A request for the file. GitHub handles this under its own privacy policy. | github.com |
The install ID
Licenses and trials are limited per computer, so Wireway makes an install ID from your Mac's Hardware UUID: inst_ followed by part of a SHA-256 hash. The Hardware UUID itself never leaves your Mac, and the hash can't be turned back into it. The ID stays the same for that Mac, even if you delete Wireway's data or use another email address, and that is how a second trial on one computer is refused. It is only sent once you activate a key. On a Mac with no hardware ID, Wireway makes up a random one instead.
What stays on your Mac
Captured traffic, rules, sessions, settings, your certificate authority and your license file are kept in Wireway's data folder and are never sent to us. We can't see or recover them.
Traffic that leaves your Mac because of what you set up
- The
Viaheader. Free and Trial addVia: 1.1 wireway (Wireway Free)or(Wireway Trial)to requests they send on, so the servers those requests go to can see it. Pro adds nothing. - Traffic you proxy, replay or forward goes where you or your rules send it, including any upstream proxy you set.
- AI agents. If you connect an agent through the MCP server, it can read what your plan allows, including captured traffic, and may send it to that agent's provider. That is between you and that provider.
Starting a trial
This takes two steps, and only the second involves the app.
- Asking for a key, at account.wireway.dev/trial in your browser. You send your email address, and Cloudflare Turnstile checks that you are a person. We store the address, a new trial license (a scrambled copy of its key, the key's first and last few characters as a hint, its plan and dates) and the time. The key goes to you by email through Amazon SES.
- Entering the key in the app. This is an activation, as in the table above. We then also record which install ID the trial went to.
We keep the trial's email address and install ID indefinitely, even if the license is deleted, because they are what limit each address and computer to one trial.
Buying Pro
Checkout is run by Stripe, through Link, which acts as merchant of record and handles your card, billing and tax details under its own privacy policy. We never see your card details. When you pay, Stripe tells us your email address, its customer, subscription and payment IDs, and the payment time. We use them to make your license, email the key and handle renewals and refunds. The thanks page sends the checkout session ID to our server to show your details once.
What we store on our licensing server
- License: the holder's email address, plan, dates, install limit, a scrambled copy of the key (we can't read the key itself) and its first and last few characters as a hint.
- Each computer on a license: the install ID, when first and last seen, the Wireway version, the system details from activation, the latest time zone, any name you give it, and when it was removed.
- Each run of Wireway: the session ID, when it started, its last check-in and when it ended. This shows when Wireway was running on that computer.
- Purchases: the details under Buying Pro, and any refund.
- Portal sign-ins: your email address and a scrambled copy of each link and session.
The portal and email
Signing in at account.wireway.dev sends us your email address, checked by Cloudflare Turnstile, and we email you a link that lasts 15 minutes. Signing in sets one necessary cookie, wl_account, for 14 days. We only send email you need: sign-in links and license keys, through Amazon SES (EU, Stockholm region). If you write to support, your message and address are kept in our mailbox, hosted by Apple iCloud. If you open a GitHub issue, it is public and covered by GitHub's policy.
The website
- Cookies: wireway.dev sets none of its own. It remembers a light or dark theme you pick in your browser's local storage, which is never sent to us.
- Analytics: we use Cloudflare Web Analytics, which is cookie-free, to count visits and measure page performance.
- Fonts: pages load fonts from Google Fonts, so your browser sends your IP address and the page address to Google.
- Hosting: Cloudflare serves the site and processes your IP address to do so.
IP addresses
Our services run behind Cloudflare, which processes your IP address to deliver and protect them. Our licensing server uses it for rate limits while it handles your requests. It doesn't store it in its database or logs. Update checks are anonymous, and their logs leave out IP addresses too. Our server logs record each request with its install, session or license reference, never your email address, license key or IP address, and are deleted as they are rotated out.
Why we use your data
- To perform our contract with you (GDPR article 6(1)(b)): issuing, checking and moving licenses, sending keys and sign-in links, handling purchases, and answering support requests.
- Our legitimate interests (article 6(1)(f)): preventing license and trial abuse, keeping our services secure and running, understanding which versions and systems are in use, and measuring visits to the website.
- Legal obligations (article 6(1)(c)): keeping accounting and tax records where the law requires it.
We don't sell your data or use it for advertising, and we make no automated decisions with legal effects on you, beyond refusing a license that is over its limits.
Who receives data
- Cloudflare: hosting, network delivery, Turnstile and Web Analytics.
- Stripe and Link: payments, as merchant of record.
- Amazon Web Services (SES): sending email.
- Apple (iCloud Mail): our support mailbox.
- GitHub: downloads, updates and public issues.
- Google: website fonts.
Some of these providers are in the United States or process data there. Where data leaves the EU, it relies on safeguards such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We may also disclose data when the law requires it, or to whoever takes over Wireway.
How long we keep it
- Licenses, computers and sessions: until the license is deleted. You can delete your own license in the portal, or ask us to. An ended license isn't deleted by itself.
- Trial records (email address and install ID): indefinitely, as above.
- Purchase records: kept after a license is deleted, for accounting and for handling refunds and renewals.
- Sign-in links and sessions: removed once they have expired (15 minutes and 14 days).
- Backups: deleted data can stay in encrypted backups until those are removed: on the server, the newest 96 snapshots and then one a day for 14 days, with an encrypted copy kept on our backup storage until it is pruned.
- Support email: as long as it is useful for helping you, or as the law requires.
Your rights
Depending on where you live, you can ask for access to your data, a correction, deletion, a limit on how it is used or a copy to take elsewhere, and you can object to uses based on our legitimate interests. Write to support@wireway.dev. We may keep what we need by law or to prevent abuse, and we'll tell you if so. In the EU you can also complain to your data protection authority; in Romania that is ANSPDCP (dataprotection.ro).
Security
We use HTTPS, sign license files, store license keys and sign-in tokens only as hashes, and encrypt backups. No system is perfectly secure, so we can't guarantee the safety of data.
Children
Wireway is a tool for developers and isn't meant for anyone under 16. If you believe a child gave us data, write to us and we'll delete it.
Changes to this policy
We may update this policy at any time by publishing a new version on this page, with a new date at the top. Please come back and read it from time to time. Unless the law requires otherwise, a new version applies from the day it is published. Our Terms of Service cover your use of Wireway.