Nostr Scrutiny fact sheet: Primal. https://scrutiny.hivescope.xyz/primal.html
Some facts that stood out:
- The web app doesn't talk to relays directly. Its only WebSocket goes to cache2.primal.net, Primal's own caching service, which sees what you read and your IP.
- The privacy policy is from February 2024 and says the mobile apps collect nothing beyond what you publish and the hosted wallet. Google Play's data safety label lists photos and videos, name, email and user IDs as collected.
- Keys: the web app supports browser extensions and remote signers (NIP-07, NIP-46), the Android app supports Amber.
- Code is MIT, with the mobile repos updated within a day of the store versions.
Facts and sources only. Corrections welcome, with a source.
Some facts that stood out:
- The web app doesn't talk to relays directly. Its only WebSocket goes to cache2.primal.net, Primal's own caching service, which sees what you read and your IP.
- The privacy policy is from February 2024 and says the mobile apps collect nothing beyond what you publish and the hosted wallet. Google Play's data safety label lists photos and videos, name, email and user IDs as collected.
- Keys: the web app supports browser extensions and remote signers (NIP-07, NIP-46), the Android app supports Amber.
- Code is MIT, with the mobile repos updated within a day of the store versions.
Facts and sources only. Corrections welcome, with a source.
1
