← back to apps

CheckLink

no.stormberry.checklink

android MIT kind 32267

A second look at links and QR codes: remove tracking parts, on your device

latest release
0.0.4 main
released 2026-10-25 19:25 UTC
download apk
checklink-v0.0.4.apk · 5.9 MB
android-arm64-v8aandroid-armeabi-v7aandroid-x86android-x86_64 vcode 4
✓ signed cert 12dec5ac…
screenshotscreenshotscreenshotscreenshot

about

description
CheckLink is a second look at links and QR codes. It shows what a link holds before you share or open it: the parts that tell Google, Meta, Amazon and others about your click are marked in red, each with who learns it and what it tells. Untick anything you want to keep, then copy or share the clean link. It reads QR codes too, from a picture or the camera, and says in plain words what a code holds. It never opens the link it checks. It asks for one Android permission, the camera, and only when you press Scan with camera. There is no internet permission, so it cannot send what you check anywhere, and no storage permission either: links and pictures come in by pasting, the camera, Android's file picker or a share from another app, and go out through the clipboard, a share, Android's save screen or Go to. Check it yourself before installing: aapt dump permissions <the APK you downloaded> The only lines you should see are the package name and android.permission.CAMERA. - Paste, scan or share in. Paste a link, or text with a link in it, choose a picture of a QR code, or press Scan with camera. Share a link or a picture into CheckLink from any app, and Share clean link becomes the main button. - The full link, with the tracking parts marked. Removed parts are red and struck through, so colour is not the only signal. Each one also says whether it is unique to this click or the same for everyone who got the link. - Your choice. Ticked parts are removed from the clean link; untick one to keep it, for example an affiliate tag that pays someone you want to support. Parts a page needs, such as a YouTube start time, are kept and explained, with Remove anyway. - Signs worth checking. Calm notes for a disguised address, a bare number in place of a name, a name that looks like a known brand's, a short link whose destination CheckLink cannot see, an address hidden inside another, and a link that is not encrypted. "No warning signs found" comes with a reminder that this does not prove a site is genuine. - QR codes in plain words. A web address in a code gets the full link check. Wi-Fi details, contacts, payment requests and app links are described. Secrets, such as a Wi-Fi password, stay hidden until you press Show, and copying a two-factor seed or a recovery phrase asks first. Payment requests are shown, never paid. - A QR code of the clean link. Make a QR code draws one on your device and reads it back before it shows it, then Save picture or Share picture. It is not offered for short links, sign-in links, links with personal details or links with something to check. - Go to opens the clean link in your browser, only when you press it, and asks first when there is something to check. - The camera reads a few frames a second on your device and drops them; nothing is recorded. It stops when a code is found, when you stop it or leave the app, and after two minutes without a code. While it is on, the app keeps the screen out of screenshots and the recent-apps view. - If you turn off JIT (the fast compiler) for CheckLink, for example in GrapheneOS's Exploit protection settings, scanning still works, only more slowly. What it cannot do: a tracking part its dated rules do not name stays in the link. It never opens a link, so it cannot see where a short link or a redirect ends up. It cannot tell whether a site, a sender or an offer is genuine, and a link with nothing to point out can still lead somewhere harmful. Cleaning can break a link, so every removal can be undone and the original is always there. The app runs CheckLink's web page from inside the APK, offline. The build checks that every bundled file is byte for byte the one in the source repository, apart from one added line in index.html for the bridge to Android. In English only. The privacy page and the full disclaimer open from the app's footer. This is a functioning prototype from Stormberry AS, MIT licensed, so expect gaps and changes.
publisher
108aef782a95a65a2df059578e67a71366a65a697e163711b54574e8da0e6e30
first seen
2026-10-15T14:01:07.857489+00:00
last event
2026-10-25 19:37 UTC
website
https://stormberry.as
install
zapstore.dev or any Zapstore-compatible client
topics
#links #offline #privacy #qrcode #tracking

source & build

repository
https://github.com/StormberryAS/CheckLink
arch flags
android-arm64-v8a android-armeabi-v7a android-x86 android-x86_64
manifest
zapstore.yaml ok checked 2026-10-15T14:16:24.429592+00:00
parsed zapstore.yaml (gap-filler — event fields always win)
{
  "icon": "./fastlane/metadata/android/en-US/images/icon.png",
  "images": [
    "./fastlane/metadata/android/en-US/images/phoneScreenshots/01-link-check.png",
    "./fastlane/metadata/android/en-US/images/phoneScreenshots/02-clean-link.png",
    "./fastlane/metadata/android/en-US/images/phoneScreenshots/03-make-qr-code.png",
    "./fastlane/metadata/android/en-US/images/phoneScreenshots/04-qr-code-from-picture.png"
  ],
  "license": "MIT",
  "match": "checklink-.*\\.apk$",
  "name": "CheckLink",
  "release_notes": "./fastlane/metadata/android/en-US/changelogs/1.txt",
  "repository": "https://github.com/StormberryAS/CheckLink",
  "summary": "A second look at links and QR codes: remove tracking parts, on your device",
  "tags": [
    "privacy",
    "links",
    "qrcode",
    "tracking",
    "offline"
  ],
  "website": "https://stormberry.as"
}

releases (kind 30063)

4 releases indexed; latest 0.0.4.

versionchannelreleasedevent
0.0.4 main 2026-10-25 19:25 UTC d1e296b8…
0.0.3 main 2026-10-25 08:31 UTC a63dcff8…
0.0.2 main 2026-10-23 16:13 UTC 395357e2…
0.0.1 main 2026-10-15 14:00 UTC 9e812695…

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

0.0.4 — checklink-v0.0.4.apk

sha256
8e50c77c9d2aa12438b176afb99b8e7d00d18e90c4a498a9ed2bba512d694d8d
size
5.9 MB
archs
android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
version code
4
apk cert sha256
12dec5ac5eda5500ec233bd10f58515fd99d9a82480ed56445418b164f28a5d5
download
checklink-v0.0.4.apk

0.0.3 — checklink-v0.0.3.apk

sha256
974b5e3a6ad35673d400323c12e3736ec3803c3848173610740f4893cc961997
size
5.9 MB
archs
android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
version code
3
apk cert sha256
12dec5ac5eda5500ec233bd10f58515fd99d9a82480ed56445418b164f28a5d5
download
checklink-v0.0.3.apk

0.0.2 — checklink-v0.0.2.apk

sha256
eb405bfbf620ea566af53b9ea767ae113dc8cb739278b979da1d748e1e55c0c2
size
5.9 MB
archs
android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
version code
2
apk cert sha256
12dec5ac5eda5500ec233bd10f58515fd99d9a82480ed56445418b164f28a5d5
download
checklink-v0.0.2.apk

0.0.1 — checklink-v0.0.1.apk

sha256
412c87866bb97e2362fe66adce4ec941333f21b21370ee58cf879dae1780aed3
size
5.9 MB
archs
android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
version code
1
apk cert sha256
12dec5ac5eda5500ec233bd10f58515fd99d9a82480ed56445418b164f28a5d5
download
checklink-v0.0.1.apk

Showing the newest 4 asset descriptors; the full set is in /api/apps/108aef78…