CRIMSON RELAY -- PRIVATE NETWORK TEST (0.2.0)

Installing does not enable sharing. Read the in-app disclosure, explicitly opt in, and select Start. Each launch starts paused. No background startup task or inbound listener is installed on your PC.

Authenticated proxy users may connect to any public website on ports 80 and 443 through your internet connection. There is no destination-domain allowlist. Requests appear to originate from your public IP. Private, loopback and special networks are blocked. Only use a device and connection you are authorized to share. Check your ISP terms; participation uses data and electricity and may affect IP reputation.

HTTPS stays encrypted between the requesting browser and the destination. Plain HTTP is visible in transit. The relay does not retain traffic bodies, browsing history or local files. The operator records device name/identifier, consent version, timestamps, destination hostname/port and transfer counts; the backend can see your IP. Test records remain until operator deletion. Ask your inviting test operator about support, abuse reports and deletion.

The monthly budget counts forwarded upload and download bytes, including website TLS bytes. WebSocket, DNS and control traffic add overhead. Before each forwarded chunk the app persists the counted bytes. Download bytes may already have reached the network stack before being counted or refused; kernel buffers, in-flight traffic and protocol overhead mean this is not an ISP-level hard data cap. Sessions have operational limits of five minutes, 128 MiB per connection and eight concurrent connections per participant.

Pause or close the window to stop forwarding. Withdraw Device revokes the credential when the backend is reachable. Operator pause/revocation closes active tunnels. Remove the app using Windows Installed Apps. Local usage/consent state remains across reinstall to preserve budgets. The device secret is encrypted with Windows DPAPI for your account.

The control server is https://relay.dbcrimson.com. This release is for invited testing. The VPS proxy listens on localhost and requires a separate proxy credential; the operator accesses it through SSH. No anonymous public proxy is provided.

The application, installer and uninstaller carry a LOCAL SELF-SIGNED TEST SIGNATURE. It is not a publicly trusted publisher signature. Windows may show trust warnings. No Windows root/publisher trust stores or security settings are modified. The private signing key stays nonexportable in the build workstation's current-user certificate store.

NO GUARANTEED INCOME. No customer billing, payable earnings or automatic payouts are enabled in this test. Running the app does not entitle you to payment. Contact the operator who invited you for assistance.
