Netsbee Data Privacy Explained
Whenever you use software or an online service, it is important to understand how your information is handled. Netsbee follows a simple principle: collect only the minimum amount of data required to protect your network.
Most security analysis happens entirely on your device. When a cloud service is required, Netsbee sends only the information needed to perform that specific check.
Privacy Principles
🛡️ On-device first
Where possible, processing happens entirely on your device. Information is not uploaded unless it is needed for a specific feature.
📉 Data minimisation
Netsbee uses only the minimum information required for each security feature. Most information never leaves your device.
🔒 Compartmentalised by design
Each cloud or security service receives only the information required for its own task. No external provider receives your complete network information.
👤 Your identity
Netsbee does not collect your name or Apple ID.
Your email address is used only when you enable breach monitoring. It is sent to the breach-checking service and is not stored by the Netsbee API.
🌐 External IP privacy
For Cloud Intelligence monitoring, Netsbee does not send your external IP address directly to the Netsbee API.
A keyed cryptographic hash is generated instead. The secret key remains within Cloudflare’s edge infrastructure, so the Netsbee API cannot reverse the hash to recover your IP address.
How Your Data Is Used
The sections below explain where each type of information is processed.
Your name and Apple ID
Never collectedEmail address
Used only when you enable optional breach monitoring.
- Stored on your device
- Sent to the breach-checking service
- Not stored by the Netsbee API
Location information
- Your location UUID remains on your device
- Precise location is not retained
- Approximate city-level location may be used by Netsbee Cloud and included in an AI summary
External IP address
- Available on your device
- Netsbee Cloud receives only a keyed hash
- Requests to security and AI services are protected through Cloudflare
Wi-Fi and router identifiers
- Your Wi-Fi name remains on your device
- Only the first six characters of the router vendor prefix may be used for router identification
- Your complete router identifier is not sent to external services
Network scan information
The following information may be processed on your device and by Netsbee Cloud:
- Number of detected devices
- Router brand
- Network performance
- ISP details
- Detected open ports
Security services receive only the information needed to perform a specific check. AI summaries receive only a masked summary, including the number of detected ports rather than raw port data.
Names you create
Names you assign to locations remain on your device.
Membership status
Your membership status is processed on your device and may be checked by Netsbee Cloud to determine which features are available.
External Services
Netsbee Cloud: Receives only the minimum information required to provide cloud-based security features.
Security services: Independent providers used only for specific checks, such as breach monitoring or internet-exposure detection.
AI summaries: Receive only a short, masked summary of scan results and never receive raw network data. From Netsbee version 1.25 onward, AI requests are proxied through Cloudflare edge processing.