Privacy Policy

Updated September 30, 2026

Circuit for iPhone

Circuit for iPhone works as a VPN on the iPhone itself. There is no Circuit server: each connection goes straight out or through a VPN you added, as your rules say. The list of what your apps reached is kept in the VPN's memory while it runs and is gone when it stops. Your rules, settings and VPN configurations stay on the iPhone (the configurations, which hold private keys, in its keychain).

Circuit collects no data, sends no crash reports and has no analytics. To do its work, the VPN contacts only:

• The DNS servers in Circuit's Settings (Cloudflare's 1.1.1.1 and Google's 8.8.8.8 unless you change them), which look up the names of sites whose connections go straight out. Those providers' own privacy policies apply to the lookups they receive.
• The publishers of the block lists you turn on, once a day, to fetch the lists: GitHub for Steven Black's unified hosts, and abuse.ch for URLhaus.
• Cloudflare, through each route, to show where that route reaches the internet (Cloudflare's public trace page, which reports the address and location a request came from).
• The VPNs you add: the WireGuard servers in your configurations, and, if you sign in to Tailscale, Tailscale's coordination service, which your Tailscale account and Tailscale's privacy policy govern. Circuit turns off the logs a Tailscale device would otherwise send to Tailscale.

To show where a refused site would have gone, the VPN looks its name up once through those same DNS servers; and for a connection an app made to an address without looking up a name, it asks them once for the name the address resolves back to. Notifications about new domains are made on the iPhone. The map's locations come from a database of IP locations that ships inside the app (IP Geolocation by DB-IP); looking an address up there sends nothing anywhere.

Circuit for Mac

Circuit for Mac routes each app's traffic on the Mac; what it sees of that traffic stays on the Mac. On its own, it sends:

• Update checks to circuit.occlusion.app, with the version you have.
• When the Circuit Pro trial starts, a one-way hash of the Mac's hardware ID, so that reinstalling does not start the trial over. We keep the hash and the time the trial began; the hardware ID itself never leaves the Mac.
• Once you have a license, a weekly download of the list of revoked license keys. Nothing is sent with it.
• Crash reports, to Sentry: the stack traces, the Circuit and macOS versions and the Mac model, with no host name, user, logs or anything about the connections Circuit handles. You can turn them off in Circuit's Settings.
• Cloudflare, through a route, when Circuit shows where that route reaches the internet.
• The VPNs you add: your own servers, and, if you sign in to Tailscale, Tailscale's coordination service, which your Tailscale account and Tailscale's privacy policy govern. Circuit turns off the logs a Tailscale device would otherwise send to Tailscale.

Buying Circuit Pro

Payments are made through Stripe, which receives your payment details under its privacy policy; we never see them. We receive the email address you give Stripe and put it in your license key, and we use it only to answer you about your purchase.

This website

circuit.occlusion.app is hosted by Cloudflare, and counts visits with Cloudflare Web Analytics, which sets no cookies and does not follow you across sites.

Children

Circuit is not directed at children, and we do not knowingly receive any information from them.

Changes and contact

If what the apps send changes, this page changes first, with its date. Questions, or a request about the little we hold (a purchase's email address, a trial's hash): support@occlusion.app.