What you'll see
- Which app is sending data, by its real name.
- Which company receives it: Google, Meta, Amazon, or an advertising or analytics firm you've never heard of. Trackers and advertisers are labelled.
- Where in the world it goes, drawn live on a map from wherever you are.
- What kind of data it probably is, like your location or advertising ID, plus a privacy report for each app.
- Warnings when an app connects to a known scam website or malware server.
How to install WhoSees on Linux
AppImage (any distribution)
- Download
WhoSees-Linux.AppImage(about 210 MB). - Make it executable: right-click it, open Properties and turn on Allow executing file as program, or run
chmod +x WhoSees-Linux.AppImage. - Double-click it to start WhoSees. Nothing else to install: it runs on Ubuntu, Zorin, Mint, Arch, Fedora and most other desktops as they come. If it ever says it can't mount, your system is missing FUSE: install
fuse3(sudo apt install fuse3,sudo pacman -S fuse3orsudo dnf install fuse3), or start it with./WhoSees-Linux.AppImage --appimage-extract-and-run.
Fedora
Download whosees-fedora.x86_64.rpm and install it with sudo dnf install ./whosees-fedora.x86_64.rpm. WhoSees then appears in your app menu.
Standard and Deep mode
| MODE | WHAT IT DOES |
|---|---|
| Standard | No password needed. Shows programs, companies and places from the kernel's connection table. |
| Deep | Asks for your login password through your system's password window each time you press Start. Adds website names and catches every connection. Reads packet headers only, never contents. |
Uninstalling
AppImage: delete the file. Fedora: sudo dnf remove whosees.
Questions
Which Linux distributions does WhoSees run on?
The AppImage runs on most 64-bit desktop distributions. Fedora users can also install the .rpm package.
Why does Deep mode ask for my password?
Reading website names from network traffic needs administrator rights on Linux. Your system's own password window asks for it; WhoSees never sees or stores your password.