MMY download site privacy

What this site does with data, kept separate from what the MMY app does.

This site

mmydownload.org is a set of static pages. There is no account system, no form, and no analytics script. The server log holds the usual request line: an address, a browser string, the page requested. That log is not used to build a profile and it is not sold.

The download click

The button leaves this site. It carries two parameters, bnp and gz, which tell the install host which listing to show and which channel file to serve. This site adds no identifier of its own, so it cannot trace a click back to a reader. From the click onward the request belongs to that host, which logs what it logs. This site does not see that log.

The app

The measured package declares permissions for network access, audio, vibration, notifications, the phone state, an advertising id, an install-referrer lookup, message delivery, and two vendor permissions that only apply on Samsung and Huawei phones. The manifest does not declare contacts, messages, camera or location. A channel record inside the package names an AppsFlyer source marker and a data collection host, so the app reports install attribution somewhere. What else it sends cannot be read from the manifest, and this site does not claim to know.

READ_PHONE_STATE is the permission worth reading twice, because it lets an app read device identifiers. The advertising id permission is granted through Play services rather than prompted on screen. On a phone that is neither Samsung nor Huawei, the two vendor lines do nothing at all.

Cookies

These pages set none. A cookie that appears while you read them came from somewhere else.

Contact

There is no account data here to access or delete, because none is collected. Data held inside the app has to be requested from the developer, through the app.

What the hash page adds

The checksum instructions ask you to run a command on your own computer against a file you already hold. Nothing from that computation is sent anywhere. The hash is compared by eye, or by pasting both values into a text editor, and the result stays on your machine. This site never receives the file you are checking and never learns whether it matched.