CheckLink
no.stormberry.checklink
android MIT kind 32267
A second look at links and QR codes: remove tracking parts, on your device
latest release
0.0.4
main
released 2026-10-25 19:25 UTC
download apk
checklink-v0.0.4.apk · 5.9 MB
✓ signed
cert 12dec5ac…
about
- description
- CheckLink is a second look at links and QR codes. It shows what a link holds before you share or open it: the parts that tell Google, Meta, Amazon and others about your click are marked in red, each with who learns it and what it tells. Untick anything you want to keep, then copy or share the clean link. It reads QR codes too, from a picture or the camera, and says in plain words what a code holds. It never opens the link it checks. It asks for one Android permission, the camera, and only when you press Scan with camera. There is no internet permission, so it cannot send what you check anywhere, and no storage permission either: links and pictures come in by pasting, the camera, Android's file picker or a share from another app, and go out through the clipboard, a share, Android's save screen or Go to. Check it yourself before installing: aapt dump permissions <the APK you downloaded> The only lines you should see are the package name and android.permission.CAMERA. - Paste, scan or share in. Paste a link, or text with a link in it, choose a picture of a QR code, or press Scan with camera. Share a link or a picture into CheckLink from any app, and Share clean link becomes the main button. - The full link, with the tracking parts marked. Removed parts are red and struck through, so colour is not the only signal. Each one also says whether it is unique to this click or the same for everyone who got the link. - Your choice. Ticked parts are removed from the clean link; untick one to keep it, for example an affiliate tag that pays someone you want to support. Parts a page needs, such as a YouTube start time, are kept and explained, with Remove anyway. - Signs worth checking. Calm notes for a disguised address, a bare number in place of a name, a name that looks like a known brand's, a short link whose destination CheckLink cannot see, an address hidden inside another, and a link that is not encrypted. "No warning signs found" comes with a reminder that this does not prove a site is genuine. - QR codes in plain words. A web address in a code gets the full link check. Wi-Fi details, contacts, payment requests and app links are described. Secrets, such as a Wi-Fi password, stay hidden until you press Show, and copying a two-factor seed or a recovery phrase asks first. Payment requests are shown, never paid. - A QR code of the clean link. Make a QR code draws one on your device and reads it back before it shows it, then Save picture or Share picture. It is not offered for short links, sign-in links, links with personal details or links with something to check. - Go to opens the clean link in your browser, only when you press it, and asks first when there is something to check. - The camera reads a few frames a second on your device and drops them; nothing is recorded. It stops when a code is found, when you stop it or leave the app, and after two minutes without a code. While it is on, the app keeps the screen out of screenshots and the recent-apps view. - If you turn off JIT (the fast compiler) for CheckLink, for example in GrapheneOS's Exploit protection settings, scanning still works, only more slowly. What it cannot do: a tracking part its dated rules do not name stays in the link. It never opens a link, so it cannot see where a short link or a redirect ends up. It cannot tell whether a site, a sender or an offer is genuine, and a link with nothing to point out can still lead somewhere harmful. Cleaning can break a link, so every removal can be undone and the original is always there. The app runs CheckLink's web page from inside the APK, offline. The build checks that every bundled file is byte for byte the one in the source repository, apart from one added line in index.html for the bridge to Android. In English only. The privacy page and the full disclaimer open from the app's footer. This is a functioning prototype from Stormberry AS, MIT licensed, so expect gaps and changes.
- publisher
- 108aef782a95a65a2df059578e67a71366a65a697e163711b54574e8da0e6e30
- first seen
- 2026-10-15T14:01:07.857489+00:00
- last event
- 2026-10-25 19:37 UTC
- website
- https://stormberry.as
- install
- zapstore.dev or any Zapstore-compatible client
- topics
- #links #offline #privacy #qrcode #tracking
source & build
- repository
- https://github.com/StormberryAS/CheckLink
- arch flags
- android-arm64-v8a android-armeabi-v7a android-x86 android-x86_64
- manifest
- zapstore.yaml ok checked 2026-10-15T14:16:24.429592+00:00
parsed zapstore.yaml (gap-filler — event fields always win)
{
"icon": "./fastlane/metadata/android/en-US/images/icon.png",
"images": [
"./fastlane/metadata/android/en-US/images/phoneScreenshots/01-link-check.png",
"./fastlane/metadata/android/en-US/images/phoneScreenshots/02-clean-link.png",
"./fastlane/metadata/android/en-US/images/phoneScreenshots/03-make-qr-code.png",
"./fastlane/metadata/android/en-US/images/phoneScreenshots/04-qr-code-from-picture.png"
],
"license": "MIT",
"match": "checklink-.*\\.apk$",
"name": "CheckLink",
"release_notes": "./fastlane/metadata/android/en-US/changelogs/1.txt",
"repository": "https://github.com/StormberryAS/CheckLink",
"summary": "A second look at links and QR codes: remove tracking parts, on your device",
"tags": [
"privacy",
"links",
"qrcode",
"tracking",
"offline"
],
"website": "https://stormberry.as"
}
releases (kind 30063)
4 releases indexed; latest 0.0.4.
| version | channel | released | event |
|---|---|---|---|
| 0.0.4 | main | 2026-10-25 19:25 UTC | d1e296b8… |
| 0.0.3 | main | 2026-10-25 08:31 UTC | a63dcff8… |
| 0.0.2 | main | 2026-10-23 16:13 UTC | 395357e2… |
| 0.0.1 | main | 2026-10-15 14:00 UTC | 9e812695… |
assets & verification
Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.
0.0.4 — checklink-v0.0.4.apk
- sha256
- 8e50c77c9d2aa12438b176afb99b8e7d00d18e90c4a498a9ed2bba512d694d8d
- size
- 5.9 MB
- archs
- android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
- version code
- 4
- apk cert sha256
- 12dec5ac5eda5500ec233bd10f58515fd99d9a82480ed56445418b164f28a5d5
- download
- checklink-v0.0.4.apk
0.0.3 — checklink-v0.0.3.apk
- sha256
- 974b5e3a6ad35673d400323c12e3736ec3803c3848173610740f4893cc961997
- size
- 5.9 MB
- archs
- android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
- version code
- 3
- apk cert sha256
- 12dec5ac5eda5500ec233bd10f58515fd99d9a82480ed56445418b164f28a5d5
- download
- checklink-v0.0.3.apk
0.0.2 — checklink-v0.0.2.apk
- sha256
- eb405bfbf620ea566af53b9ea767ae113dc8cb739278b979da1d748e1e55c0c2
- size
- 5.9 MB
- archs
- android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
- version code
- 2
- apk cert sha256
- 12dec5ac5eda5500ec233bd10f58515fd99d9a82480ed56445418b164f28a5d5
- download
- checklink-v0.0.2.apk
0.0.1 — checklink-v0.0.1.apk
- sha256
- 412c87866bb97e2362fe66adce4ec941333f21b21370ee58cf879dae1780aed3
- size
- 5.9 MB
- archs
- android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64
- version code
- 1
- apk cert sha256
- 12dec5ac5eda5500ec233bd10f58515fd99d9a82480ed56445418b164f28a5d5
- download
- checklink-v0.0.1.apk
Showing the newest 4 asset descriptors; the full set is in /api/apps/108aef78…