Privacy

Privacy Policy

Last updated: October 4, 2026. · Versión en español

What stays on your device

Everything your use of Scalpel produces lives on the phone or tablet in your hand:

• Your browsing — tabs, history and settings of the built-in browser.
• Data from the sites you visit — cookies, localStorage, sessionStorage, IndexedDB and cache those sites create in the built-in browser, just like in any other browser.
• Inspection artifacts — network logs and HAR files you export, heap snapshots, pretty-printed code and any resource overrides you define.
• Your preferences — app settings. Local.
• Your subscription and trial state — cached locally as confirmation that your trial period or subscription is active (see below).

There is no Scalpel server storing your history, your tabs, your HARs or your snapshots. There is no account and no sign-up: you download the app, open it and use it.

Inspection happens on your device

Scalpel's core feature is showing you the anatomy of the pages you open: the DOM tree, every network request with its response body, cookies (including httpOnly ones), storage and memory. It matters exactly where that happens:

• Scalpel connects to the device's own browser engine through its local instrumentation protocol. Reading the DOM, the network, storage and the heap happens entirely on your phone.
• Scalpel does not upload, store in the cloud or share page content, response bodies, cookies or any other inspected data. If something gets saved (for example an exported HAR), it is saved only on your device.
• No third-party remote analysis service is used: inspection is local.

Your browsing traffic

When you browse with Scalpel, traffic travels directly from your device to the sites you visit, just like in any browser. Scalpel does not route your traffic through its own servers, does not intercept it remotely and keeps no record of it outside the device. Each connection's encryption (HTTPS) depends on each site, and Scalpel shows it to you as it is.

Whatever you type in the address bar that is not a web address is sent as a search to the search engine you choose in Settings (Brave Search by default), as in any browser. That query goes straight from your device to the search engine, which handles it under its own privacy policy.

Scalpel versions up to and including 1.5.0 download the interface typefaces (Inter and Chivo) from the Google Fonts service (fonts.gstatic.com) the first time they are opened, so Google receives your device's IP address with that download. Later versions ship those typefaces inside the app and do not connect to Google Fonts.

Purchases and subscription

Scalpel comes with a 30-day trial and, after that, an annual subscription. Billing is handled exclusively by the Apple App Store or Google Play: Scalpel never sees your card, IBAN, bank details or any financial data.

To confirm that your trial or subscription is still active, the app talks to our own service at iap.sggyamg.com: when you open it, when you buy or restore, and from time to time to check that the subscription is still active. That communication carries:

• The purchase receipt or identifier issued by the store, so the server can verify with Apple or Google that it is genuine.
• A device identifier that anchors the trial period and your purchases: it is used to make the trial and the subscription work and to prevent fraud with the trial period. It is a technical identifier, not an advertising identifier, and it is not tied to your name or your email: the server does not know who you are. It is a random code (UUID) created by the app itself, except on new Android installs of versions later than 1.5.0, where it is computed on the phone from the system identifier (ANDROID_ID) with a hash function (SHA-256): the ANDROID_ID itself never leaves the device. In versions up to and including 1.5.0 the identifier is kept only in the app's data, so uninstalling the app or clearing its data replaces it with a new one (on a Mac, only if its container, ~/Library/Containers/com.sggyamg.scalpel, is deleted too: the Trash does not delete it). Later versions keep the one you already had: on iOS and macOS they also store it in the system keychain so it survives a reinstall, and on Android new installs compute it from ANDROID_ID, which does not change when you reinstall.
• That same identifier travels to Apple or Google with each purchase (as appAccountToken on iOS and macOS and obfuscatedAccountId on Android) so the store can tie it to your subscription. That is how Apple and Google notify iap.sggyamg.com of changes to your subscription (start, renewal, cancellation, refund).

The server keeps only what all this needs, tied to that identifier: the start date of your trial, the notices from Apple or Google about your subscription and the status of the Scalpel licences linked to it. On top of that come the invitation code and the technical access logs explained below. It does not receive or store your browsing, your HARs, your snapshots or any inspected data.

Like any web service, iap.sggyamg.com also writes a technical log entry for every request it receives: the IP address, the date and time, and the request (method and address), which for some requests includes the device identifier. These logs rotate automatically: at most 5 files of 50 MB are kept and the oldest are overwritten. The server's entry proxy also keeps an access log (IP, date and request), retained solely for security and abuse prevention.

Inviting friends

Invitations are optional, but your code exists from the start: the first time you open the app, iap.sggyamg.com assigns you an invitation code and stores it tied to the device identifier above, together with the date it was created, so it is ready whenever you want to share it. If you use invitations, it also keeps who invited whom and when the invitation was accepted, and whether the invited person subscribed or asked for a refund (as notified by Apple or Google). It uses that to count your valid invitations and, once you reach the goal, to prepare the discount offer that the store applies. It keeps no names, emails or contacts: you share the code however you like.

What we do not do

Spelled out, so there is nothing to read between the lines:

• No analytics SDKs — no Firebase, Google Analytics, Mixpanel, Amplitude, Sentry, Crashlytics or equivalents.
• No advertising identifier — we do not read or transmit the IDFA on iOS or the AAID on Android.
• No third-party tracking SDKs of any kind.
• No ads inside the app.
• No Scalpel server storing your browsing or what you inspect. The only backend we operate validates the trial and the subscription and keeps count of invitations, as described above.
• No account. There is no sign-up because there is no backend that wants to know who you are.

Permissions

Scalpel mainly needs Internet access — it is a browser. It does not ask for your location or contacts, does not read your photo library and gives no page access to anything without asking you. The only permissions it may ask for are these, always at that moment and only if you choose to:

• Add to Photos (iOS) — only in versions later than 1.5.0, and only if you choose “Save Image” when sharing a capture of the page: the image is added to your photos, on your device.
• Camera (iOS) — only in versions later than 1.5.0, and only if a page asks you to upload a photo or video and you choose to take it right then: what you capture goes to that page, as in any browser, and Scalpel does not keep it.
• Microphone (iOS) — only in versions later than 1.5.0, in the same case, and only if what you choose is to record a video to upload.

Summary for Data Safety / App Privacy

For Google Play's Data Safety and Apple's App Privacy "Nutrition Label" forms, this is the explicit summary:

• History, tabs, site data and inspection artifacts (HARs, snapshots, overrides). Collected: yes, exclusively on the device. Shared: no. Transmitted to Scalpel servers: no.
• Content of inspected pages (DOM, response bodies, cookies). Processed: yes, on the device. Transmitted: NO. Stored on a server: NO.
• Device identifier (random UUID, or SHA-256 hash of ANDROID_ID on new Android installs). Used: yes, sent to iap.sggyamg.com and to Apple or Google to validate the purchase, anchor the 30-day trial and count invitations. Advertising: NO. Linked to your name or your email: NO.
• Subscription history (start, renewals, cancellation and refunds notified by Apple or Google) and, if you use invitations, who invited whom. Collected: yes, at iap.sggyamg.com, tied to the device identifier. Shared with third parties: NO. Tracking: NO.
• Invitation code (assigned the first time you open the app). Collected: yes, at iap.sggyamg.com, tied to the device identifier. Shared with third parties: NO. Tracking: NO.
• Technical access logs (IP, date and request, sometimes with the device identifier). Collected: yes, on the server, to run it and keep it secure. Shared with third parties: NO. Tracking: NO.
• Payment data — card, IBAN, any bank details. Collected: NO. Billing is done by Apple or Google; Scalpel never sees it.
• Advertising identifiers (IDFA, AAID). Collected / read: NO.
• Account identifiers (email, phone, username). Collected: NO. The app has no account system.
• Contacts, SMS, calls, location. Accessed: NO.
• Crash reports / analytics / telemetry. Sent to a third party: NO.

Subscription validation travels over HTTPS with TLS 1.2 or higher. Your browsing traffic goes straight to each site, with whatever encryption that site offers.

Your rights (GDPR)

You have the right to know what personal data is processed about you. Scalpel runs no server that stores your browsing or your inspection data. What does leave your device is described above: at iap.sggyamg.com, tied to the technical identifier, the start date of your trial, the notices from Apple or Google about your subscription, the status of your licences, the invitation code assigned to you the first time you open the app and, if you use invitations, the invitation data; plus the technical access logs. In addition, as explained above, each site you visit receives your traffic as in any browser, the search engine you choose receives your searches, Apple or Google process your purchase data and, in the versions that still download them, Google Fonts receives your IP when the typefaces are downloaded.

To access or delete your data: what is stored locally is removed by clearing the app's data or uninstalling it — that removes the history, site data, inspection artifacts and the cached subscription information (in versions later than 1.5.0, the device identifier is kept in the iOS and macOS keychain, as explained above). On a Mac there is an exception: dragging Scalpel to the Trash does not delete its data, which macOS keeps in the app's container (~/Library/Containers/com.sggyamg.scalpel); to delete it, delete that folder too. For the data that iap.sggyamg.com keeps tied to your identifier (including asking for it to be deleted) or anything related to your purchase or subscription, write to us. Remember to cancel the subscription from Apple or Google before uninstalling if you do not want it to renew.

For privacy questions or to exercise your rights of access, rectification, erasure, objection, restriction of processing or portability, or any other right the law grants you: apps.sggyamg [at] gmail [dot] com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

About this website

This site (scalpel.sggyamg.com) uses no cookies and no analytics. It only stores in your browser's storage (localStorage and sessionStorage) the language you choose and whether yours has already been detected, so it does not redirect you again. None of that is sent to any server or shared. Like any web server, the one serving this site keeps a technical access log (IP address, date and page requested), retained solely for security and abuse prevention.

Changes to this policy

If we change this policy, we will update the "Last updated" date above and publish the new version at this URL. Any substantial change (a new third-party integration, a new piece of data collected) will be announced in the corresponding app release notes before it takes effect.

Contact

Questions, complaints, or "this doesn't work the way it says here":

apps.sggyamg [at] gmail [dot] com

This policy is published by sggyamg, developer of Scalpel, based in Madrid, Spain.

Language

The Spanish version is the original, binding version of this Privacy Policy. Versions in other languages are translations offered solely for your convenience; in case of discrepancy or conflict of interpretation, the Spanish version prevails.