Sia Manager for Cloudflare
Sia Makerlab 제품 포트폴리오 통합 페이지에서 제공하는 개인정보처리방침입니다.
Last Updated: July 26, 2026
Effective Date: July 26, 2026
Revision: 1.0
| Version | Date | Changes |
|---|---|---|
| 1.0 | July 26, 2026 | Initial release |
This Privacy Policy describes how Sia Makerlab ("we," "us," or "our") collects, uses, and shares information in connection with your use of the Sia Manager for Cloudflare mobile application (the "App").
The App is an Android client for inspecting Cloudflare infrastructure and running operational tasks — such as DNS edits, cache purge, and security toggles — using a Cloudflare API Token that you provide. It connects directly from your device to the official Cloudflare REST and GraphQL APIs and communicates with no other server. It does not require you to create an account, and we do not operate a server that stores your token or your data. By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the App.
Independence disclaimer: Sia Manager for Cloudflare is an independent application and is not affiliated with, endorsed by, or sponsored by Cloudflare, Inc. "Cloudflare" and related names and logos are trademarks of Cloudflare, Inc. and are used here only descriptively. The App communicates only with the official Cloudflare APIs using credentials you provide.
The App is designed to function without an account or personal information. We do not collect your name, email address, phone number, or physical address.
To use the App, you provide one or more Cloudflare API Tokens (scoped tokens only — Global API Keys and passwords are not supported), together with an optional label to help you identify each account. This configuration is stored locally on your device and is not collected by us.
When you use the App, it communicates directly from your device to the official Cloudflare APIs at api.cloudflare.com over HTTPS — there is no Sia Makerlab server, agent, or gateway in the path. Your API Token is sent only to Cloudflare as an Authorization: Bearer header to call Cloudflare REST and GraphQL endpoints (token verification, accounts, zones, DNS records, cache purge, zone settings, and analytics). Your token, zones, DNS values, analytics, and settings travel between your device and Cloudflare — not through us. We do not see, receive, or store any of them. You are responsible for ensuring you are authorized to access any Cloudflare account you connect to and to perform the operations you execute.
The App stores the following data only on your device:
| Data | Collected | Stored | Shared | Purpose |
|---|---|---|---|---|
| Cloudflare API Token | Yes | Device only (encrypted) | No | Authenticating to the Cloudflare API; encrypted at rest with Android Keystore-backed AES (AndroidX security-crypto) in app-private storage, never shown again after entry (only the last 4 characters are displayed) |
| Account label & token last-4 | Yes | Device only | No | Listing your connected accounts; does not include the full token |
| Zone / DNS / analytics cache | Yes | Device only | No | The last successful response and a refresh timestamp, keyed per account and per zone so data does not leak across accounts |
| Activity log | Yes | Device only | No | Time, area, result, account label, zone name, and a short summary of recent reads/writes — tokens, DNS values, email addresses, and account IDs are never written to it; a bounded number of recent entries is retained |
| App settings | Yes | Device only | No | Preferences such as theme and selected account |
This data is stored exclusively on your device with backup disabled (android:allowBackup="false"), so it is excluded from device cloud backups. We do not have access to it, and it is never transmitted to our servers.
The App requests only the following Android permission:
INTERNET): required to call the Cloudflare API.The App does not request camera, microphone, location, contacts, storage, or background data permissions.
We explicitly do not collect:
The App contains no analytics SDK, no advertising SDK, no crash-reporting SDK, and no other telemetry. It does not phone home to any server other than Cloudflare's API.
Data stored on your device is used locally to:
We do not receive any of this data and therefore do not use it ourselves.
We do not sell, trade, or rent your personal information to third parties.
The App integrates no third-party analytics, advertising, or crash-reporting services. It communicates only with the Cloudflare API, which handles your requests according to Cloudflare's own privacy policy: https://www.cloudflare.com/privacypolicy/. Cloudflare is operated independently of us, and its handling of your account and data is outside our control.
We may disclose information if required to do so by law or in response to valid requests by public authorities. As we hold no user content, such disclosure would be limited to information actually in our possession.
Data stored on your device remains until you delete it within the App, clear app data in device settings, or uninstall the App. Removing an account from Settings deletes that account's token and its cached zones/DNS/analytics; the activity log can be cleared independently. Because we operate no server and receive no data, we retain nothing about you or your Cloudflare account.
Data you view or modify through the Cloudflare API is retained by Cloudflare according to its own policies.
You have the right to:
For users in the EEA, United Kingdom, and Switzerland: under the GDPR and applicable laws, you also have the rights to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. Because we hold no personal data about you, these requests are generally satisfied on your device.
We implement reasonable technical measures to protect data on your device:
android:usesCleartextTraffic="false"); the App communicates with Cloudflare over TLS onlyAuthorization header is masked in any diagnostic loggingNote that the operations available in the App reflect the permissions your API Token holds on Cloudflare; true access restriction is configured on the token itself.
The App is a technical tool and is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children.
The App itself transfers no data to us. Requests you make are sent to Cloudflare, which may process them in countries with different data protection laws. Please refer to Cloudflare's privacy policy for more information.
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date and, for material changes, displaying a notice within the App.
We are not responsible for the data collection, use, or security practices of Cloudflare or any other party whose service you connect to through the App.
We are not responsible for any loss of data stored locally on your device, including your API Tokens, cached data, and activity log.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES RESULTING FROM YOUR USE OF THE APP.
This Privacy Policy shall be governed by the laws of the Republic of Korea. For EU users, it shall be interpreted in accordance with applicable EU law including the GDPR.
Sia Makerlab
For GDPR-related inquiries from EEA residents, please include "GDPR Request" in the subject line.
| Data Type | Collected | Stored | Shared | Purpose |
|---|---|---|---|---|
| Cloudflare API Token | Yes | Device only (encrypted) | No | Authenticating to the Cloudflare API |
| Account label & token last-4, settings | Yes | Device only | No | Listing accounts and preferences |
| Zones, DNS, analytics, security data | No (sent device → Cloudflare) | Cached on device only | Only with Cloudflare | Inspecting and operating your Cloudflare account |
| Activity log | Yes | Device only | No | Recent reads/writes (tokens and sensitive values excluded) |
| Advertising ID | No | N/A | No | N/A — the App contains no advertising |
| Personal info | No | N/A | No | N/A |
The App contains no advertising, no in-app purchases, no analytics, and no crash reporting.
This Privacy Policy is available in English. If translated versions are provided, the English version shall prevail in case of any discrepancy.