FlarePurge
ES

Privacy Policy

Last updated: April 19, 2026

FlarePurge is a native Apple application developed by Color Vivo Internet, SL (hereinafter, "we", "us" or "Color Vivo"), a Spanish company registered in Madrid. This policy explains, in plain language, what data FlarePurge handles and — more importantly — what it does not.

Summary

  • We do not collect any personal data. FlarePurge has no backend, no accounts, no servers that process your data.
  • No analytics, no tracking, no third-party SDKs. We do not use Firebase, Google Analytics, Mixpanel, crash reporters or advertising networks.
  • Your Cloudflare API tokens stay on your device. They are stored in the iOS/macOS Keychain and never leave your device except to go directly to Cloudflare.
  • Your favorites sync through your own iCloud. We have no visibility into that data.

What the app stores on your device

  • Cloudflare API tokens you add. Saved in the system Keychain inside an App Group shared between the main app and future extensions. By default they are stored device-only; you can opt in to iCloud Keychain sync in Settings.
  • A local cache of the zones associated with your accounts, so the app can paint instantly at launch. This cache contains only public Cloudflare zone identifiers and hostnames — no secrets.
  • Your preferences: selected color scheme, language, and similar UI state.
  • Favorites (optional): the zones you pin for quick access. If you are signed in to iCloud and allow it, favorites sync across your devices through Apple CloudKit using your personal, private iCloud database. We have no access to that container.

What the app sends over the network

FlarePurge makes HTTPS requests exclusively to api.cloudflare.com, the official Cloudflare API. These requests are:

  • User-initiated: they happen when you tap a button (list zones, purge cache, etc.).
  • Authenticated with your token, sent as a Bearer header.
  • Protected with TLS and certificate pinning: the app verifies the server's public key against a built-in list of trusted SPKI hashes before completing the handshake.

FlarePurge does not send any request to any server operated by Color Vivo. There is no telemetry endpoint, no "phone home", no remote configuration fetch.

Cloudflare as a third party

When you use FlarePurge you are, in effect, calling Cloudflare's API with credentials you have issued yourself. Cloudflare is an independent data controller for that traffic. Please review Cloudflare's privacy policy to understand how they handle API usage.

Children

FlarePurge is a professional developer tool and is not directed at children under 13. We do not knowingly collect data from anyone, including children.

Your rights under GDPR

Because FlarePurge does not collect or process personal data on our servers, there is nothing for us to access, rectify, delete, export or restrict. You remain in full control of your data on your own device at all times.

If you have any question or concern, write to us at support@flarepurge.com.

Changes to this policy

If we ever add features that change the data handling of FlarePurge — for example, an optional opt-in diagnostics channel — we will update this page and the app will inform you before enabling anything new. We will never enable a tracking feature silently.

Contact

Color Vivo Internet, SL
Email: support@flarepurge.com
Website: colorvivo.com