Privacy policy

Last updated: September 22, 2026

Vigil analyzes data already sitting on your iPhone and never lets it leave the device.

1. The privacy report

Vigil reads the .ndjson file you export yourself from Settings › Privacy & Security › App Privacy Report. This file stays on the device, imported manually, never collected automatically.

2. No server

All analysis — scoring, tracker categorization, night-access detection — happens locally in the app. No data is ever sent to LaCobble or to any third party.

3. Password checks

Compromised-password checks use the Have I Been Pwned API with k-anonymity: only the first 5 characters of the password's SHA-1 hash are sent, never the password itself.

4. Tracker database

The tracking-domain database used to categorize trackers ships inside the app, with no network call involved.

5. Marketing site

This website may use Google Analytics, only if you allow it through the cookie banner.

6. Contact

For any privacy question: vigil@lacobble.dev