Legal

Privacy Policy

Switchflare is designed so your Cloudflare session data stays local, encrypted, and outside of Switchflare servers.

Effective date: May 9, 2026Zero-knowledge architecture

At Switchflare, we believe your data is exactly that—yours. This Privacy Policy explains how we handle your information, what limited data we do collect for licensing purposes, and how your sensitive Cloudflare data remains completely local to your device. Switchflare is developed by Wassim Soltani and operated through STE BLUEBLOOD SUARL (Tunisia).

1. The Short Version (TL;DR)

  • We cannot see your Cloudflare accounts.
  • We do not collect, sync, or store your Cloudflare session cookies.
  • We do not track your browsing history or analytics.
  • All sensitive data is encrypted locally on your device using a master PIN.
  • The only data we collect is your email and a generated Machine ID for license activation and payment processing.

2. Data We Do Not Collect

Because Switchflare operates entirely within your browser's local environment, we have absolutely no access to the following:

  • Cloudflare Credentials & Cookies: We do not collect, transmit, or store your Cloudflare login details, email addresses, or session cookies.
  • Browsing Activity: We do not track which websites you visit or which Cloudflare accounts you access.
  • Master PIN: Your Master PIN is strictly used locally to derive an encryption key. It is never transmitted to our servers. If you lose your PIN, we cannot recover it for you.

3. Data We Do Collect

To provide Pro and Team tiers, enforce license limits, and process payments, we collect the bare minimum required data:

A. Licensing Data

When you activate a Switchflare Pro or Team license, the extension communicates with our licensing API. We collect and store:

  • Email Address: The email used to purchase the license.
  • License Key: The unique key generated upon purchase.
  • Machine ID: A randomly generated local UUID used to enforce concurrent device limits, such as 10 seats on the Team tier. We do not collect your IP address, MAC address, or hardware identifiers for this purpose.

B. Payment Information (Handled by Paddle)

Our order process is conducted by our online reseller Paddle.com. Paddle is the Merchant of Record for all our orders.

  • When you upgrade to a paid tier, Paddle collects your billing information, such as credit card details, name, and address, to process the transaction, handle taxes, and manage subscriptions.
  • We never see or store your full credit card number or payment details. We only receive confirmation of your purchase and the associated email address to generate your license key.
  • For more information, please review Paddle's Privacy Policy.

4. How Your Data Is Protected Locally

Switchflare uses industry-standard cryptographic practices to help keep your data safe even if someone gains physical access to your device.

  • At-Rest Encryption: All account metadata and session cookies are encrypted locally using AES-GCM (256-bit).
  • Key Derivation: The encryption key is generated using WebCrypto PBKDF2 hashing derived entirely from your Master PIN.
  • Zero Cloud Syncing: Your encrypted vault is kept entirely within your browser's local storage (browser.storage.local) and is never synced to the cloud.

5. Third-Party Services

To operate the product and related business functions, we use the following third-party services:

  • Paddle: Acts as our Merchant of Record for payment processing and global tax compliance.

6. Your Data Rights

If you are a resident of the European Economic Area (EEA), California, or other regions with applicable privacy laws, you may have the right to:

  • Request access to the licensing data we hold about you.
  • Request correction or deletion of your licensing data.
  • Withdraw consent for active subscriptions.

To exercise any of these rights, or to request the complete deletion of your license and email from our database, please contact us using the email below. Deleting the Switchflare extension from your browser also deletes all of your local encrypted session data from that browser environment.

7. Changes to This Policy

We may update this Privacy Policy from time to time as we add new features or comply with legal requirements. If we make significant changes, we will update the effective date at the top of this page and, where appropriate, provide a notice within the Switchflare extension.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at:

Ready to use Switchflare?

Install the extension and keep your Cloudflare account switching fast, local, and secure.