Your Cloudflare account, on your phone.

Cloudflare publishes no app for managing your own account. Pilvi is one — and it never asks you to paste an API token.

Coming to the App Store
iPhone iPad 12 languages Needs a Cloudflare account
The account dashboard: alerts for a tunnel that is down and Worker
            errors, a world map of where traffic came from, and the day's
            requests, visitors and threats. One domain: a traffic chart over 24 hours, then certificates,
            security events, DNS records, DNS options and email routing. A Worker: requests and errors over 24 hours, and the R2 bucket, KV
            namespace and queue it is bound to.

Signing in

No API token, and nowhere for one to leak.

Pilvi signs in through Cloudflare's own OAuth consent screen. It never sees your password, and it asks only for read permission until the first time you change something — so deciding whether the app is worth buying costs you no permission to edit your DNS.

Nothing passes through us

Your authorization lives in the keychain on your device and talks to Cloudflare directly. There is no server of ours for it to pass through, because there is no server of ours.

Nothing is collected

No analytics, no crash reporting, no advertising identifier, no third-party code in the binary. There is no account to make.

You can see what it may read

A permissions screen lists what your Cloudflare authorization actually covers, product by product.

What it shows

The whole account, not the three parts that fit in a free tier.

Traffic and where it came from. Domains, DNS records, certificates and the proxied hostnames a certificate does not cover. Email routing. Security events, and what each rule actually stopped. Workers with their errors and their bindings. Pages, Queues, D1, R2, KV. Tunnels, their connectors and what they reach.

It says when it does not know

Cloudflare answers a permission you did not grant with an empty list rather than an error, which looks exactly like an account with nothing in it. Pilvi tells those two apart everywhere.

It says what a number is not

Sampled data is labelled as sampled. A tunnel's status covers the link to Cloudflare, not whether your services are up — and the screen says so, because the difference has fooled people.

It changes only what a phone is good at

The orange cloud on a DNS record, its TTL, and turning an email rule off. One tap, immediately visible, undone the same way. No seven-field forms.

The price

One payment, and no badge on anything.

Two weeks of the whole app, then a single purchase for all of it, on every device on your Apple Account. Not a subscription. There is no PRO badge on any screen and no feature sold separately — the trial is time-limited rather than a permanently thinner app.

Suggestions

Tell me what is missing.

Pilvi is made by one person, and most of what it shows got there because somebody said what they went looking for and did not find. Suggestions and bug reports are read.

offline@dresende.pt

On iPad

Two columns in landscape, not a stretched phone.

Pilvi on an iPad in landscape: the alerts list across the full
                width, then the world map beside the traffic chart, in dark
                mode.