Zone Editor: CloudLog Privacy Policy

Summary

CloudLog talks directly to Cloudflare using the API token you provide. There is no mk0.net server in between, and your token never leaves your device except to authenticate with Cloudflare. Subscriptions are handled by RevenueCat.

This policy covers the Zone Editor: CloudLog app for iPhone and iPad, published by mk0.net, an independent app studio. It is written from what the app actually does in its code. Questions: [email protected].

What we receive

Nothing. We have no accounts or servers for this app, and nothing you enter in it is sent to us.

What stays on your device

• Your Cloudflare API tokens, Global API Keys and account emails are stored in the iOS Keychain on this device.
• Account names and cached Cloudflare data, such as your zone list and DNS records, are stored on this device.
• The widgets share a small summary with the app on this device.

We cannot see this data. It is not uploaded to us.

Permissions the app may ask for

• Notifications: Asked when you turn on alerts. Alerts are created on your device during a refresh and never include your credentials.

Every permission is optional and can be changed later in the iPhone Settings app. Features that need a permission you decline simply stay unavailable.

Data that leaves your device

The app talks to the following services. Each receives only what is listed, and only for the purpose shown.

• services and servers you connect yourself (the app's main function): Your Cloudflare API token, or Global API Key and email, is sent to Cloudflare's API (api.cloudflare.com) with every request you make, to read and change your own account. Nothing passes through our servers.
• RevenueCat (subscription management): An anonymous app user ID and your subscription status, when the app checks, starts or restores your subscription. Nothing you enter in the app is sent. Their privacy policy.

Your keys and passwords

Your Cloudflare API token, or Global API Key and account email, is stored in the iOS Keychain on this device. It is sent only to api.cloudflare.com and is never included in backups or notifications.

Sensitive information

Your API credentials give access to your Cloudflare account. Use a scoped API token with only the permissions you need. You can remove an account in the app at any time and revoke the token in the Cloudflare dashboard.

Purchases

Subscriptions are sold and billed by Apple through the App Store. We never see your name, Apple ID, card or payment details. The app checks your subscription status through RevenueCat, which receives an anonymous ID and your purchase status, not your identity.

Ads, tracking and analytics

No ads, no tracking across apps or websites, and no data sold. The app contains no analytics SDK.

Account

No mk0.net account. You sign in with an API token from your own Cloudflare account. A demo mode with sample data lets you look around first.

Children

Zone Editor: CloudLog is not directed at children under 13, and we do not knowingly collect personal information from children.

Keeping and deleting your data

You can remove an account in Settings, which deletes its credentials from the Keychain. You can export a JSON backup of your account list, which never contains your secrets. Deleting CloudLog removes its cached data from this device. Revoke tokens in the Cloudflare dashboard if you no longer need them.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR, CCPA or KVKK), you have the right to access, correct, export or delete your personal data. Because the app keeps your records on your own device, you can do most of this directly in the app or by deleting it. For anything else, or for data held by a service listed above, email [email protected] and we will help within 30 days.

Changes to this policy

If the app starts handling data differently, we will update this page and the date below before the change ships.

Contact

mk0.net, [email protected]