710 ConsoleGet the app
// Verified production behaviour

Privacy and security

710 Console controls the radio locally. Internet connections support updates, licensing, optional usage statistics, remote operation and optional online logbook/map features.

Automatic application connections

Update checks

The app requests version.json from 710console.co.uk. When you approve an update, it downloads the installer from the same site. The installer is not launched unless its SHA-256 matches the published release metadata.

Licensing

The app contacts the 710 Console licence service with a salted hash derived from the Windows machine identity, a one-time nonce and any licence key entered by the user. The raw Windows MachineGuid is not sent. Signed replies are checked against the machine and nonce before they are accepted.

Usage statistics

Usage statistics are enabled by default and can be switched off under Help → Share usage statistics. Every few minutes the app sends:

  • A separate salted installation identifier
  • App version
  • Seconds the app was open
  • Seconds connected, receiving, transmitting and in remote sessions

The telemetry payload does not include callsigns, frequencies, audio, logbook data, precise location or typed text. The service records the country associated with the network request. Turning sharing off clears unsent counters.

Remote operation

When enabled, the station and remote PCs connect to the 710 Console relay using WSS transport encryption. Registration/pairing sends the app version and Windows computer name. During a session, radio control state, spectrum data and encoded audio pass through the relay.

Share codes are short-lived, single-use credentials. PTT remains a station-controlled lease with automatic release if heartbeats stop.

The verified protection is encrypted WSS transport. This page does not claim independently verified end-to-end encryption.

Optional online features

DX cluster

Connects to the configured cluster over Telnet, sends the configured callsign to log in, requests recent spots and reads the feed. Telnet itself is not encrypted.

QRZ lookup

Sends QRZ username/password to QRZ's XML service to obtain a session, then sends looked-up callsigns.

HamQTH

When configured, sends HamQTH credentials for a session and callsigns for lookup.

QRZ Logbook upload

When explicitly enabled, sends the QRZ API key and QSO data to QRZ Logbook.

Maps and geocoding

Downloads OpenStreetMap tiles and sends place-search terms to Nominatim when station locations must be estimated.

Open QRZ page

Opens the selected callsign's QRZ webpage in the default browser when requested.

QRZ and HamQTH credentials stored by the app are encrypted for the current Windows account.

Website services

  • Cloudflare serves the site and download.
  • Download statistics store time, day, filename, country, referring source, browser/OS family and a short daily visitor hash. Raw IP addresses are not stored by the application database.
  • The feedback form sends name, email, subject and message to Formspree.
  • Google Fonts supplies the website fonts.

Security controls

  • Installer SHA-256 verification before an update is launched
  • Signed licence replies with nonce and machine checks
  • WSS required for the production remote relay
  • Single-use remote codes that expire after five minutes
  • Station-side command checks and automatic PTT timeout
  • Passwords and API keys are never requested in a support report

When sharing diagnostics, remove licence keys, passwords, API keys and any other secrets.