The short version: WireVitals has no accounts, no advertising, no analytics and no tracking, and Extrosy runs no servers — so we receive nothing from you. To test your connection the app has to contact public test servers, which see your internet address the way any website does. Your results, reports and logs stay on your device unless you choose to share them. If you buy WireVitals Pro, Google Play handles the purchase.
Nothing. WireVitals does not send any information to Extrosy. There is no sign-in, no advertising, no analytics and no crash-reporting service. Besides Google's standard Android libraries (AndroidX and Material Components) the app contains one more Google component: the Google Play Billing Library, which offers WireVitals Pro.
WireVitals Pro is a one-time purchase through Google Play, which takes the payment under your Google account and under Google's own terms and privacy policy. The app never sees your payment details: it asks Google Play only for the price and whether your account owns Pro, and remembers the answer on your device. Extrosy sees only the order records Google Play gives every seller, and uses them only for refunds and support. The billing library may also send Google diagnostic information about its own working, as Google's policies describe.
A network health checker cannot work offline: to measure your connection it has to talk to servers on the internet. Every server it contacts sees your device's public internet address and the request itself, exactly as any website you visit does; what those services do with that is covered by their own privacy policies. WireVitals sends them no personal information beyond what the test needs, as listed here.
| What for | Who it talks to, and what is sent |
|---|---|
| Sign-in page detection | www.msftconnecttest.com and connectivitycheck.gstatic.com — the same tiny test requests Windows and Android make. |
| Your public address and provider | api.ipify.org (also api4. / api6.ipify.org) tells the app its own public address. ipwho.is (ipwhois.io) receives that address over HTTPS and returns the approximate area it belongs to. The provider's name comes from Team Cymru's public routing data: the app asks a DNS question that contains the address (written backwards, as such questions are), which goes through your network's DNS server to Team Cymru. The VPN check asks Team Cymru the same way about the addresses it compares. |
| Speed and load tests | speed.cloudflare.com — the app downloads and uploads blocks of meaningless test data. Can be switched off with "Skip the speed test". |
| Ping, traceroute and DNS | Google (8.8.8.8, dns.google), Cloudflare (1.1.1.1), Quad9 and OpenDNS, plus whatever targets you set in Settings. DNS questions include test names such as google.com and made-up names that cannot be cached. |
| Clock accuracy | Public time servers: time.google.com, time.windows.com, time.cloudflare.com, time.android.com. |
| NAT type, calls and meetings | STUN requests to stun.l.google.com and stun.cloudflare.com; Microsoft Teams' relay (worldaz.tr.teams.microsoft.com) and Google Meet's relay (meet.turns.goog); the sign-in sites of Teams, Meet, Zoom and Webex are opened but nothing is signed in to. |
| Secure connections and tampering | Ordinary HTTPS connections to six large sites (www.google.com, www.microsoft.com, www.cloudflare.com, www.apple.com, www.amazon.com, github.com) to check who issued their certificates, and plain-HTTP requests to github.com, www.wikipedia.org and www.paypal.com to check that they still send you to HTTPS. |
| Remote-desktop and port reachability | ping3.teamviewer.com, remoting-pa.googleapis.com and portquiz.net — connection attempts only. |
| Gaming readiness | A small UDP packet to the Amazon GameLift ping servers in each AWS region (gamelift-ping.<region>.api.aws), which send it straight back; Steam's public relay list (api.steampowered.com) and a ping to one relay in each city on it; Discord's public list of nearby voice servers (latency.discord.media) and a connection to each; a Minecraft server-list ping to mc.hypixel.net; and the public sign-in / connection-test addresses of Xbox Live, PlayStation Network, Nintendo, Steam and Discord. Nothing is signed in to. |
| Tools you run by hand | Only what you type: the host you ping, trace, scan or look up. IP whois asks IANA and the regional internet registries (RDAP), Team Cymru (by DNS) and ipwhois.io about the address you entered. Route map sends the addresses of the routers on the path to ipwhois.io, one at a time over HTTPS, to place them on the map. Check from outside sends the target you typed and the kind of test to Globalping (api.globalping.io), whose volunteer test points around the world run it. Globalping's measurements are public: anyone who has a measurement's link can see the target and the results, and they may be indexed by search engines. When the target is your own public address, the app asks first, every time. iperf3 speed test (Pro) talks only to the iperf3 server you pick - your own, or a public one run by others, such as the ones the app suggests - and sends or receives test data for the time you set. |
| Buying Pro | Google Play (through the Play Store app on your device): the price, the purchase and whether your account owns Pro. See Buying WireVitals Pro above. |
| Your router | UPnP / NAT-PMP requests to the router on your own network. The router check adds a test port opening for two minutes and removes it; the "Two devices" waiting side asks the router to open its port for the session and closes it afterwards. |
| Two devices | Only the device you choose. Measurement packets, and the results of the run, are exchanged with it; the other device saves its log on that device. |
| The connection monitor | While you run it: a ping a second to your ping target, a kept-open HTTPS connection to www.google.com, a STUN request to Google every few seconds, DNS look-ups and the sign-in page test; with "Every router on the path" on, a traceroute to the ping target now and then and a ping every couple of seconds to each router on the way. The items you can switch off are listed on the Monitor screen. |
| Devices on this network | Only your own local network: pings, connection attempts and the standard discovery protocols devices answer (mDNS, SSDP/UPnP, NetBIOS). Nothing from the scan leaves your network. |
Android hides the Wi-Fi network name, the access point and the list of nearby networks from any app without location permission, so WireVitals asks for it to analyse Wi-Fi. It is optional: the "Scan nearby Wi-Fi networks" setting turns the request and the scans off, and the rest of the app keeps working. The connection monitor keeps that access while the screen is off so it can notice roaming between access points. The Route map uses the device's last known location to mark "you" only if location permission is already granted. Location is used on the device only and is never sent anywhere.
Reports, logs, the history of past checks, your settings, the devices seen on each network (their names and hardware addresses, so a new device can be marked as new), simple notes per network (for example whether a sign-in page was ever seen there), the notes you add to a monitor run, the speeds you pay for if you enter them for the evidence report, and whether you own Pro. All of it lives in the app's private storage, is never uploaded, and is removed when you uninstall the app. Reports > Clean up deletes reports and logs at any time.
Tools > Useful websites and the Downdetector link in Check from outside are ordinary links: the app does not fetch those pages. When you tap one it opens in your web browser, and that site's own privacy policy applies to your visit. WireVitals sends those sites nothing.
A report or log leaves your device only when you tap Share and pick where it goes. Reports can contain your network's details — addresses, the provider, Wi-Fi names — so look before you send one.
Only when you ask it to: the connection monitor and the two-device measurement run as a foreground service with a notification for as long as you leave them running, and the optional scheduled check (off by default, Reports > Check on a schedule) runs the checks every few hours and adds the result to the history on your device - without the speed tests unless you switch them on in Settings, and never on a metered network. With alerts on, the monitor posts a notification when the connection drops and when it comes back. The home-screen widget and the quick-settings tile run a check only when you tap them.
WireVitals is a general-audience network utility. Because it collects no personal information, it does not knowingly collect data from children or anyone else.
If this policy changes, the updated version will be posted at this same address with a new "Last updated" date.
Questions about this policy? Email extrosy@gmail.com.