Skip to content

Featured project · dedicated hardware & location privacy

CipherGPS. Your location. Your key.

A tracking project built around a clear privacy boundary: Ghost encrypts vehicle location inside a dedicated GPS tracker before upload, and authorised customer devices hold the keys to read the journey.

End-to-end encrypted GPS tracking

Privacy starts where the position is recorded.

Code Monkey's CipherGPS project brings dedicated tracker hardware, custom firmware and a private viewing experience together. The GPS device installed with the vehicle supplies its location independently. A phone or browser is the customer's interface for setup and viewing.

With Ghost, location is encrypted on the physical device before transmission. The service routes and stores ciphertext; the customer's authorised devices decrypt it into a useful map and journey history.

The defining feature is the location-data boundary: Ghost's private decryption keys stay with authorised customer devices, outside the tracking service.

CipherGPS tracker artwork beside a mountain lake
CipherGPS project artwork

The Ghost location-data journey

Dedicated hardware records the position. Encryption protects it through to the authorised viewer.

  1. Provision locally

    Bluetooth onboarding passes the encryption details from the customer's device to the nearby tracker. Ghost encryption keys stay outside CipherGPS's systems.

  2. Encrypt before upload

    Custom tracker firmware encrypts location at the source. The service receives encrypted content routed under a pseudonym rather than the tracker IMEI.

  3. Decrypt on your devices

    Authorised customer devices retrieve the encrypted records and use their private keys to reveal the location and history.

Ghost and Private: two distinct privacy models

The end-to-end encryption claim applies to Ghost's device-side design.

Ghost · encryption in the tracker

Dedicated hardware running custom firmware encrypts location before it leaves the device. CipherGPS receives no readable live location or saved route, and authorised customer devices hold the private decryption keys.

Explore Ghost ↗

Private · encrypted stored history

Compatible tracker hardware sends a live packet over a secure connection. The server processes location and identifiers briefly in memory, encrypts stored records to the customer's device keys, then discards the readable packet. This is a different boundary from Ghost's end-to-end design.

Explore Private ↗

Customer-held keys shape the whole service.

Location privacy carries practical responsibilities. Keep a secure backup: if every authorised device and decryption key is lost, CipherGPS cannot recover encrypted history or restore Ghost tracker access.

Neither tracker provides server-generated location alerts as standard. The optional desktop companion can read the customer's vault locally and check geofences, movement and low battery while the computer is on and the app is running. Chosen notifications also involve the selected delivery service.

Clear privacy boundaries

Location-content encryption does not erase connection metadata, traffic timing or records created by payment, shipping and support. Tracking still needs suitable hardware, power and mobile coverage.

The project is presented for location privacy. Insurance acceptance and certification should be checked for any separate security requirement.

Read CipherGPS's encryption explanation ↗

Questions about CipherGPS

Does CipherGPS use a mobile phone to track the vehicle?

Vehicle position comes from dedicated GPS tracker hardware. An authorised phone, browser or companion app is used to set up the tracker or view and decrypt records; it is not the vehicle's location source.

What makes CipherGPS Ghost end-to-end encrypted?

Ghost encrypts location inside the custom-firmware tracker before transmission. The service routes and stores encrypted records, while authorised customer devices hold the private keys needed to decrypt location history.

Do Ghost and Private use the same encryption design?

No. Ghost encrypts on the tracker before upload. Private receives a live packet over a secure connection, processes location and identifiers briefly in server memory, then encrypts stored records to the customer's device keys and discards the plaintext. Private is not described as end-to-end encrypted.

Does CipherGPS include server-generated geofence or movement alerts?

Neither tracker includes server-generated location alerts as standard. The optional desktop companion can check the customer's vault locally and send chosen notifications while the computer is on and the app is running.

Can CipherGPS recover Ghost history if all my keys are lost?

No. If every authorised device and decryption key is lost, encrypted history cannot be recovered by CipherGPS. Ghost tracker access also cannot be restored by the service. Keep a secure key backup.

Build a tracking service around your privacy requirements.

Talk to Code Monkey