WhoSeesLast updated 2026-11-15
The WhoSees app
WhoSees does not collect, send or sell any of your information. Everything it shows is worked out on your own device, and nothing is sent to us or to anyone else. The only request WhoSees ever makes on its own is the optional update check described below, which is off unless you turn it on.
- What it looks at: while a live view is running, the details of your device's network connections: which app made them, the address and port they go to, the website name when it's visible, and how much data was sent. For data sent without encryption, it checks the parts needed to say what kind of data it was (for example a location). It does not read the contents of encrypted traffic.
- Where that goes: nowhere. It's shown on your screen and discarded when you press Stop or close WhoSees.
- What it saves: only your settings (such as your home city, display preferences and the blocks you chose to keep), stored on your device.
- Reports (PDF): made on your device only when you ask for one, and saved where you choose. WhoSees doesn't upload or share them.
- Blocking: done entirely on your device. On a computer WhoSees adds temporary firewall rules while a live view runs and removes them when you press Stop; on Android the VPN simply doesn't pass the blocked connections on.
- Lists it uses: the IP-location, tracker and threat lists are built into the app and used offline. WhoSees doesn't look anything up online.
- Update checks (off unless you turn them on): the first time you open WhoSees, it asks whether you'd like it to check for updates. If you say yes, once a day when you open it, WhoSees downloads one small public file, whosees.app/version.json, that lists the newest version. Like visiting any website, that request reveals your internet address. Nothing else is sent: no ID, no list of your apps, nothing about what WhoSees shows you. Our server doesn't keep a log of these requests. You can turn this off any time in Settings.
- Links: the website, source code and "buy me a coffee" links open in your browser only when you click them.
Android permissions
| PERMISSION | WHY |
|---|---|
| VPN | The only way Android lets an app see where other apps send data. Traffic stays on your phone and goes on to where it was going; nothing goes to a VPN server. |
| See installed apps | To show each app's real name and icon instead of a number. |
| Notifications | To warn you if an app connects to a dangerous website while WhoSees is running. |
| Internet | To pass your apps' traffic on to where it was going, and, only if you turned it on, to check for updates. |
| Network state | To know whether you're on Wi-Fi or mobile data, so apps behave the same as without WhoSees. |
Windows and Linux
Deep mode asks your system for administrator permission so WhoSees can read where network traffic goes and, if you block something, add temporary firewall rules. Your password goes to your system's own security prompt; WhoSees never sees or stores it.
The whosees.app website
- Visit counting: we use Umami, an open-source analytics tool running on our own server. It doesn't use cookies and doesn't store your IP address. It records the page you viewed, the site that linked you here, your browser, operating system, device type and approximate country, plus clicks on the download and "buy me a coffee" buttons. We use this only to see how many people visit and download WhoSees.
- Delivery: the site is delivered through Cloudflare, which, like any network, sees your IP address to send you the page.
- Downloads come from GitHub, and tips go through PayPal. Their own privacy policies apply there.
Children
WhoSees doesn't collect information from anyone, including children.
Changes
If this policy changes, the new version will be posted on this page with a new date. Because WhoSees is open source, you can always check what the app does in its source code.