Canary takes your privacy very seriously. Here you will find information on outgoing requests that Canary makes during normal use, including the purpose of the request, whether any personal info is involved, and how you can change Settings to turn off specific requests (if applicable).
Note that all of the following requests & services are GDPR-compliant. You can review legitimate use & other information here.
macOS & iOS
- googleapis.com & firebaseio.com - Facilitate the implementation and cross-device syncing of certain features such as read-tracking. No personal info sent.
- google-analytics.com, googleapis.com & app-measurement.com - Understand app / feature usage & user retention. Anonymized IP & data only available in aggregate. Can be disabled via Settings > Security > Analytics.
- time.google.com - Accurate time used for correct sorting and syncing of emails. No personal info sent.
- crashlytics.com - Crash reporting. Crash reports do not contain any personal data such as names, email addresses, or IP addresses.
- clearbit.com - Avatars. No personal info sent. Can be disabled via Settings > Appearance > Avatars.
- appcenter.ms - Check for new beta builds (beta channel only). No personal info is sent.
- dev.canarymail.io - Used for enriching contact information, if available from public sources. Requests are routed via Canary's proxy server, your IP is not revealed to any third parties.
iOS & Android only
- appsflyer.com - Install attribution which helps understand effectiveness of inbound marketing campaigns via Apple's privacy-friendly SKAdNetwork method.
- dev.canarymail.io - Canary's Push notifications server that notifies you of new incoming emails. To check for new incoming email directly from your device, use Fetch instead. Note that in Fetch mode Canary may send a periodic unsubscribe request to ensure your preferred notifications method is synced correctly.
- onesignal.com - Push notifications and emails for onboarding new users.