Self-host εxodus
v1.33.0Privacy auditing platform for Android apps
- Stars
- 813
- Port
- 8000 (Web frontend (Django))
- Requires
- Minio, PostgreSQL, RabbitMQ
What is εxodus?
This privacy auditing platform examines Android applications to find embedded trackers, analytics, and advertising libraries. It provides a web interface where users can search for apps and view detailed reports showing which trackers are present and their categories. The system downloads APKs from Google Play (using apkeep with AAS tokens) and F-Droid, then performs static analysis to identify tracker signatures. A REST API enables programmatic access to tracker and application data. Deployment options include Docker Compose with PostgreSQL, RabbitMQ, and MinIO, or manual installation on Debian-based systems. The platform supports over 21 languages and connects with the ETIP tracker investigation platform for community-driven tracker identification.
Should you self-host εxodus?
εxodus scores 56/100 on selfhost.directory (how scoring works) and ranks #5 of 12 in Privacy. It has 813 GitHub stars.
It shipped 5 stable releases in the past year. The latest, v1.33.0, came out on 13 September 2026. New versions land roughly every 2 months.
Setup is advanced: plan for several services and some ongoing maintenance. It is AGPL-3.0-licensed and written mostly in Python.
Its closest alternative on selfhost.directory is FreedomBox (64/100). It scores higher overall, so compare the two before you pick. See εxodus vs FreedomBox side by side.
Features
- Android APK Tracker Detection
- APK Upload AnalysisDisabled by default
- Community Tracker Identification
- F-Droid Integration
- Google Play IntegrationRequires valid Google account and AAS token
- Multi-language Support
- REST APIRate limited to 30 requests/second
- Tracker Database Auto-updateDisabled by default
- Web-based Report Interface
εxodus README
FAQ
How to count analyzed applications and reports?
Use Django shell to query the Application and Report models for distinct handles and total reports.
How to dump trackers data?
Use Django's dumpdata command for the trackers app to export tracker definitions as JSON.
How to dump reports data?
Use Django's dumpdata command excluding system tables to export reports as JSON.
How to recompute reports after adding new trackers?
Use the refreshstaticanalysis command with --all and --trackers flags to recompute tracker detection for all reports.
How to import trackers definitions?
Run the importtrackers management command with the appropriate Django settings module.
How do you detect trackers in APK?
Each tracker has code signatures (Java package names). εxodus downloads the APK, unzips it, lists embedded Java classes via dexdump, and checks if any class matches a tracker code signature.
More in Privacy
13ftSelf-hosted, open-source paywall bypass proxy: paste a URL and 13ft fetches it as Googlebot, with Freedium and archive snapshot fallbacks, in Docker or plain Python.
ackeeSelf-hosted, open-source web analytics with cookie-free anonymized tracking, a minimal dashboard and a GraphQL API. Runs on Node.js and MongoDB.
AdGuard HomeSelf-hosted open-source DNS server blocking ads/trackers network-wide. Supports encrypted DNS, parental controls, safe search, per-client config, DHCP.
AliasVaultOpen-source, self-hosted password and email alias manager: end-to-end encrypted vaults, a built-in receive-only email server, TOTP, passkeys and browser/mobile apps.
altchaSelf-hosted, open-source CAPTCHA alternative that swaps image puzzles for a silent proof-of-work widget plus MIT-licensed server libraries for 10+ languages.
am-i-exposedam-i-exposed is a self-hosted, open-source Bitcoin privacy scanner running 34 client-side heuristics with Boltzmann entropy via WebAssembly.
amiuniqueSelf-hosted browser fingerprinting research platform collecting device fingerprints to study web tracking. Built with Play Framework and MySQL.
amneziawg-installerSelf-hosted, open-source AmneziaWG 3.1 VPN server you provision on your own VPS with a single bash script: DPI-proof obfuscation, no Docker, kernel module.
AnonAddyOpen-source anonymous email forwarding: unlimited aliases to your real inbox, custom domains, OpenPGP encryption, self-host with Docker or Ubuntu.
anondeAnonde is an open-source, self-hosted PII anonymization engine that tokenizes data before LLMs see it, restoring originals only in your environment.
AnonymousOverflowSelf-hosted StackOverflow frontend that proxies requests to protect your IP and browser fingerprint. Lightweight SSR HTML, no JavaScript.
any-sync-dockercomposeDeploy your own any-sync network with Docker Compose - self-host Anytype backend
0 comments