Open Source, So You Can Check

A privacy promise is only as good as your ability to verify it.

Where The Code Lives?

Ebb’s source is published at github.com/lyfmail-official/ebb. The license is stated in the repository’s LICENSE file.

How To Verify Our Claims?

  • Storage: look for indexedDB.open('EbbData') in the app code. Cycle data is saved locally.
  • No Ads or Analytics: search the code and your browser’s network panel for third-party requests on the public pages. There should be none.
  • Server Behaviour: the PHP files show exactly what the session and log record.
  • Headers: open your browser’s developer tools and inspect the Content-Security-Policy on this page.

Contributing

Bug reports, translations, accessibility fixes and security reviews are welcome via GitHub issues and pull requests, or by email to ebb@lyfmail.com.

Reporting a Vulnerability

Please email us with steps to reproduce and do not include anyone’s real health data. We will acknowledge reports and work on a fix as quickly as we can.