Privacy

Last updated: 2026-04-27

Strait is a network egress auditor for Safari. It is built so the question "where did my data just go" never has a surprising answer — starting with Strait itself.

What Strait collects

Nothing. Strait has no analytics SDK, no telemetry, no remote logging, no account, and no server-side storage of any kind. There is no Strait-operated backend that receives your data.

What Strait does on your device

When you tap the Strait icon in Safari, Strait inspects the active tab's network path. Reports — including the host of the page, observed IPs, and probe results — are produced locally and stay on your device unless you copy or share them yourself.

Strait does not collect browsing history, build a per-site log, or monitor traffic in the background. It only runs when you ask it to.

Network requests Strait makes

To determine your exit identity, Strait makes a small set of probe requests, only when you actively run a check:

• api.ipify.org — public IP echo, to learn the system exit IP.
• mask-api.icloud.com — Apple's published iCloud Private Relay egress IP feed, cached locally for up to 24 hours.
• 1.1.1.1 (Cloudflare DNS-over-HTTPS) — used to compare system DNS against a known resolver.
• ipapi.co — ASN and coarse geolocation lookup for the observed exit IP.
• The host of the active tab — a TLS handshake to read certificate and protocol metadata. Strait clearly labels this as its own probe, not Safari's reused connection.

These endpoints receive only what is technically necessary to answer the request (for the IP echo, your IP; for the ipapi lookup, the IP being resolved; for the TLS probe, a connection to the host you are already visiting). Strait does not send these services any Strait-specific identifiers.

Optional integrations

If you choose to enable the Surge integration, Strait talks to a Surge HTTP API endpoint that you configure (by default 127.0.0.1:6171, on your own device or network). The API key is stored in the system Keychain on your device and is never transmitted to Strait or to anyone else.

What Strait is not

• Strait is not a VPN and does not route your traffic.
• Strait does not contain any third-party tracking or advertising SDK.
• Strait does not require an account or sign-in.
• Strait does not sell, share, or transmit your data to third parties.

Children

Strait is a general-audience utility and is not directed at children. It does not knowingly collect personal information from anyone, including children.

Changes

If this policy changes in a way that affects what Strait does on your device or what endpoints it contacts, the updated policy will be published here and the date above will change. Material changes will also be reflected in the app's release notes.

---