Skip to content

Privacy and Security

Jump to bottom
Mk-learning-python07 edited this page Sep 16, 2026 · 1 revision

Privacy and security

The app runs a local Python backend bound to 127.0.0.1 only. It is not reachable from your network or the internet. No accounts, no analytics, no tracking; nothing about you or your simulations is sent anywhere.

There is exactly one optional outbound request. If — and only if — you turn it on, once a week the app asks api.github.com for the latest published version number so it can tell you a bug-fix release exists. It sends a version number and nothing else: no identifier, no account, no usage data, nothing about your simulations. As with any web request, GitHub sees the IP address it came from; that log belongs to GitHub, not to this app or its author, who receive nothing. The feature is off until you say yes, the answer is remembered, and declining it is permanent until you change it in © Credits.

The app never downloads or runs code on its own. If a new version exists it shows you a link and you decide. Software that can silently replace its own executable is an ideal malware delivery route if the publisher is ever compromised; this program cannot do that even if the release page were taken over.

Full detail: PRIVACY.md and SECURITY.md. The latter also covers Host-header validation against DNS rebinding, the response headers set, input range-checking, and escaping of release notes.

Source code

The source is not published yet. It will be released once the underlying work is written up; until then the downloads are binaries only.

That is a decision about timing, not about concealment, so here is what remains verifiable in the meantime:

  • The SHA-256 fingerprints confirm the file you received is exactly the file that was published.
  • requirements-lock.txt records the exact library versions each build was compiled from — the ingredients are on the record even while the recipe is not.
  • Nothing claimed above is unverifiable from outside. A network monitor will show the app making no connections at all unless you enable update checks, and exactly one weekly request to api.github.com if you do.

If you need the source before it is published — for a review, an audit, or because your institution requires it before you may run an executable — please open an issue and ask. That is a reasonable request and it will be answered.

Wiki: Home · The Model · Isotherm Models · Mass Transfer · Adsorbent Presets · Using the App · Limitations · Privacy & Security · Troubleshooting

Clone this wiki locally