The short version
- The Mittelware app keeps your data on your device. The traffic it captures, your rules and your settings are never uploaded to us.
- There is no account to create. The app can send anonymous usage statistics — but only if you turn that on, they never include your traffic, and you can turn them off at any time.
- This website uses Google Analytics to count visits, and a third-party service to deliver messages sent through the contact form. Both are described below.
The Mittelware desktop app
What the app handles
Mittelware runs a proxy on your computer. Requests and responses from your applications pass through it so you can view and modify them. This content can include sensitive material such as cookies, tokens and personal data, depending on what your applications send.
- Captured traffic is held in memory so it can be shown in the app. It is not sent to us or to any third party by Mittelware. The proxy forwards your traffic to the servers your applications were already talking to, modified only as your own rules instruct.
- Rules and settings (such as the port the proxy uses and whether it starts on launch) are stored in a local database in the app’s data folder on your device.
- The Mittelware CA certificate and its private key are generated on your device and stored in the app’s data folder. They are never transmitted. If you choose to trust the certificate, it is installed for your user account on that device only. See how HTTPS inspection works.
- Application names and icons shown beside each request are read locally from your operating system.
What the app sends over the network
Apart from the traffic you choose to proxy, and any endpoint you configure in a rule, the app’s own network activity is checking for updates and, only if you have turned it on, sending anonymous usage statistics (described next).
To check for updates, the app downloads a small release manifest from our file host (Supabase Storage), and downloads a new version when you choose to install one. As with any web request, the host can see your IP address and standard request details such as your operating system and the time of the request. The app does not include account identifiers, rules or captured traffic in these requests. Copies of Mittelware installed from the Microsoft Store are updated by the Store instead and do not make this check.
Anonymous usage statistics (optional)
To learn which features are used and which versions and systems to support, the app can send anonymous usage statistics. This is off until you turn it on. The first time you run the app it asks, and nothing is sent, and no identifier is created, before you answer. You can change your mind at any time with the “Share anonymous usage data” switch on the Analytics tab of the app’s Settings.
When it is on, the app reports only these events:
- The app started, with its version, your operating system (Windows, macOS or Linux) and whether it came from the Microsoft Store or a direct download.
- Which screen you opened: Flows, Rules, Applications, Settings, About, or creating or editing a rule — by name only, never which rule.
- Monitoring: that it was turned on (and whether HTTPS inspection was enabled), turned off, or failed to start (only whether the port was already in use or something else), and what you chose when asked about inspecting HTTPS traffic.
- Proxy settings: which setting you changed (port, system proxy, start on launch, the CORS setting, or allowing other devices on your network) and, for the switches, whether it is now on or off. For the port, only whether it differs from the default — not the number.
- Rules: that a rule was created, saved, opened, switched on or off, copied or deleted. For created and saved rules, also its type of action (for example block or modify response) and how many conditions it has.
- Collections: that a collection was created, renamed or deleted, that a whole collection was switched on or off, and how many rules were moved into a collection. Never the collection’s name or which rules were in it.
- The Flows page: that a filter was used (and which kind: tab, application, search or filter builder), that flows were cleared or exported as a HAR file, that a flow was opened (and whether a rule was holding it), which of its tabs you viewed, that the Stream view was opened, and whether a paused request was sent on or dropped.
- Applications: that an application was opened through Mittelware, with its category (for example “Browsers”) rather than which application it was, and whether the proxy host or port was copied.
- Appearance and updates: whether you chose the light or dark theme, that an update is available (with that public release’s version), and that installing it was started.
It never includes the traffic Mittelware captures, URLs, domain names, headers, request or response bodies, the names or contents of your rules, the names of your applications, text you type into search or filters, or your port number. The analytics library also adds standard technical details to each event: the version of your operating system and of the web view the app is built on, screen size, language and time zone.
Events are tied to a random identifier generated on your device and stored in the app’s local storage. It is not derived from your hardware, your name or your accounts, and no profile of you is created. If you turn the setting off, the app stops sending events and deletes the identifier.
The statistics are processed by PostHog (PostHog, Inc.), our analytics provider, on its United States cloud. Your device contacts PostHog directly to send them. We have configured PostHog to discard IP addresses, so they are not stored with the events. We rely on your consent to collect this information, and you can withdraw it at any time as described above. We use the statistics only to understand how Mittelware is used and to decide what to improve; we do not sell them or use them for advertising.
Changing your network settings
While monitoring is on, the app can point your operating system’s proxy settings at itself so that other applications use it. It saves your previous settings and restores them when you switch it off. You can turn this off in the app’s settings.
This website
Server logs
Our hosting infrastructure records standard request logs (IP address, requested page, browser and operating system, time) for security and to keep the site running. We do not use them to build profiles of individual visitors.
Analytics
We use Google Analytics 4 to understand which pages are visited and how people reach the site. Google Analytics sets cookies in your browser and receives your IP address (we enable IP anonymization), your browser and device type, and the pages you view. Google processes this under its own privacy policy. You can opt out by blocking the Google Analytics script, using your browser’s tracking protection, or installing Google’s opt-out browser add-on.
Contact form
If you write to us through the contact form, your name, email address and message are sent to Web3Forms, which delivers them to our inbox. We use this information only to reply to you and to improve Mittelware, and we keep it only as long as needed for that. Please do not include passwords, tokens or other secrets in your message. You can also email us directly at support@mittelware.com.
Preferences
If you choose a light or dark theme, your choice is stored in your browser’s local storage so we can remember it. It stays on your device.
Downloads
Installers are served from our file host (Supabase Storage). When you download one, that host receives your IP address and request details, as described above for updates.
Third-party services
- PostHog: anonymous usage statistics from the desktop app, only if you turn them on.
- Google Analytics: website analytics.
- Web3Forms: delivers contact-form messages.
- Supabase: hosts installers and the release manifest.
- Our hosting provider: serves this website.
We do not sell personal information, and we do not show advertising.
Your choices and rights
Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected or deleted, and to object to certain processing. The only personal data we hold directly is what you send us by email or through the contact form, so the simplest way to exercise these rights is to email support@mittelware.com. For data held by Google, PostHog, Web3Forms or Supabase, you can also contact them directly.
The app’s usage statistics are anonymous, so we generally cannot tell which events belong to you. You stay in control of them: turn off “Share anonymous usage data” in the app’s Settings to stop them, and email us if you would like help having events removed.
Because the app keeps its data on your device, you can remove everything it stores by uninstalling it and deleting its data folder, and you can remove the certificate from your operating system’s certificate store at any time.
Children
Mittelware is a developer tool and is not directed at children. We do not knowingly collect personal information from children.
Security
We keep the information we hold to a minimum, which is the most reliable protection. Updates to the app are cryptographically signed so the app can verify they came from us. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
Changes to this policy
If we change this policy we will update the date at the top of the page. For significant changes we will make the change prominent on this website.
Contact
Questions about this policy? Email support@mittelware.com or use the contact form.