Privacy Policy

WebFinder for Tailscale does not collect, store, or transmit any personal data.

What the app does

• Connects to the Tailscale API using OAuth credentials you provide, or to a publisher URL you configure, to discover devices on your tailnet
• Fetches WebFinder manifests from devices where WebFinder is installed and running
• Scans local services only on the device running WebFinder
• Opens URLs in your default browser when you tap a service

Data storage

• Your Tailscale OAuth Client Secret is stored locally in the iOS Keychain; the Client ID and optional publisher URL remain in app preferences
• No data is sent to any third-party server, analytics service, or tracking platform
• No usage data, crash reports, or telemetry of any kind is collected

Network access

• The app connects to api.tailscale.com to authenticate with Tailscale and retrieve your device list
• The app connects directly to WebFinder manifest endpoints on your Tailscale devices, normally on port 9321
• The app connects to service URLs on your tailnet or local network when you open them
• The iOS app does not port-scan Tailscale peers; peer services are published by WebFinder running on those peers

Third-party services

The app uses the Tailscale API solely to discover your devices. Tailscale's own privacy policy applies to their service: tailscale.com/privacy-policy

Contact

If you have questions, open an issue at github.com/zeulewan/web-finder/issues

Last updated: May 13, 2026