What ReqTone contacts
ReqTone is built to make no connections of its own. A review of the source found no analytics library, no session recorder, no crash reporter, no remote fonts or CDN, and no auto-updater — so there is no update check phoning home either. Logging runs only in debug builds and writes to a local file.
The complete list of hosts it can reach, all of them yours to choose:
- the host of the request you send;
- an OAuth token URL you typed into a request’s auth tab;
- your own sync server, if you deliberately turn on remote-host mode — off by default, so a default install is local SQLite only.
Where this stands: the above is a source review, not a packet capture. Before we put it on this site as a headline we will run the built app idle with a network monitor and publish the output alongside the first release, so it is something you can check rather than something we assert.
Local SQLite persistence
Collections, project trees, environments, auth profiles and request history are stored in a standard SQLite file in your OS application directory. You own it outright: back it up, inspect it with any SQLite browser, keep it on an encrypted volume, or delete it.
Because the format is not proprietary, nothing about your data depends on ReqTone continuing to exist.
Offline use
ReqTone is designed to be fully functional on a machine with no outbound internet access. There is no activation, no entitlement check and no handshake required to unlock features, and it is a standing rule in the project that nothing on the startup path may wait on the network — the app opens with the cable out.
What self-hosted sync does (beta)
Self-hosted sync is in beta testing and is off by default. When you enable it, ReqTone connects to your backend — a service you deploy and administer on infrastructure you control. We do not operate multi-tenant storage for anyone's collections, so there is no shared database of ours for a breach to expose.
That also means the data on it is yours to look after. What your server logs, retains and encrypts is determined entirely by how you configure it, and being beta software, it should not be pointed at anything you have no backup of.
With sync off — which is how a default install runs — ReqTone stores everything locally in SQLite and contacts no server of ours at all.
This website
reqtone.com is static hosting. It sets no tracking cookies and embeds no third-party analytics. The one thing stored in your browser is your light/dark preference, kept in localStorage so the page does not flash on your next visit — it never leaves your device.
Every asset the page loads — fonts included — is served from this domain. There are no CDN calls, so visiting reqtone.com does not announce you to anyone but this host.
Last reviewed against the v0.1.0 source, which has not been released. A network capture of the built app will be published here alongside the first release. Material changes will be noted on this page rather than announced elsewhere.