Privacy

Enigma is designed around direct device control and local desktop storage. The product does not run a hosted application API, analytics pipeline, crash-upload service, user database, or object store.

Network boundaries

• MapLibre renders the interactive map and route overlays locally. It requests Mapbox Streets raster tiles directly from Mapbox with the user-supplied public token.
• Mapbox Search receives the typed query, proximity coordinates, language, session identifier, and public token.
• Mapbox Directions receives selected waypoints, the driving, walking, or cycling profile, and the public token. The returned route geometry is stored locally only when the user saves or runs that route.
• Signed release builds check a static updater manifest and download artifacts from GitHub Releases. Development builds do not contact the updater.
• The landing page is rendered by a Cloudflare Worker with no application bindings, storage, telemetry, or API routes.

Local boundaries

Routes, coordinates, favorites, history, and recovery state remain on the desktop. Location records are encrypted before SQLite storage. A Mapbox pk. token is public by design and is stored as a local setting; it is excluded from diagnostic exports.

Safe diagnostics omit coordinates, routes, names, UDIDs, models, iOS builds, pairing records, Mapbox tokens, raw errors, and filesystem stack paths. Diagnostics are saved only when the user explicitly exports the file.

Restore and exit protection never depend on MapLibre, Mapbox, GitHub, or Cloudflare. A failed third-party request cannot block Restore.