PasteFerryPrivacy and essential data
Official service is optional
Fresh installs use LAN mode. Official access and essential connection statistics begin only when enabled. Custom servers do not report to the official service. Direct connections are attempted first; machine quota identification and relay authorization happen only after direct failure.
Minimal service records
The gateway retains pseudonymous device numbers, first/last access times, daily relay usage, essential quota bindings and cumulative totals. Daily device detail is retained for 90 days. Official device counts are not people or total installations.
Content and identifiers
Content and real device names travel through the encrypted device channel. The gateway does not collect filenames, paths, usernames, MAC addresses, UA or behavior trails. Raw system identifiers are not uploaded; the application-specific digest groups relay quota and can be forged by a modified client.
Network visibility and allowance
Network endpoints necessarily see transient routing/address metadata; official statistics and ordinary proxy logs do not retain it. The default allowance is 100 MB/day, upload plus download, reset at midnight Beijing time. Direct traffic is not charged. Disabling official access stops its requests, polling and tunnels.
Website and audit boundary
This website uses its existing Cloudflare Web Analytics beacon. Visits are not software-user counts. The client and signaling/TURN server remain open source, with gateway fields and protocol published. Actual private production retention still requires deployment audit.