SENDER EXTREME

Is Sender Extreme safe and genuine?

Yes. This page is the creator’s own declaration, written so that anyone who is unsure — or who searched the name on Google — can see who made the app, why, and how to check it themselves.

Declaration of the creator of Sender Extreme

I, Christopher Marlowe Suarez Macalino, a Filipino architect working in Poipet, Cambodia, declare that:

  1. I personally designed and created the Sender Extreme messaging app and this website.
  2. Sender Extreme is a personal, non-commercial prototype. It is not a registered business and it is not affiliated with Telegram, WhatsApp, Signal, Session, Google or any other company.
  3. Sender Extreme is free for everyone. It shows no advertisements and has no subscriptions, fees or paid features.
  4. Sender Extreme will never ask you to send money, bank card numbers, passwords or one-time verification codes. Anyone asking for these in the app’s name is not me.
  5. Donations on the Donate page are entirely optional gifts. They unlock nothing, and not donating changes nothing.
  6. I do not sell, rent or share users’ personal information or messages with anyone.
  7. The only official places to get Sender Extreme are sender-extreme.netlify.app, its official second address sender-extreme.pages.dev (same files), and the Google Play Store under my name.
  8. The app files contain no hidden programs. The Android app asks only for the permissions explained on this page, and each one is used only for the feature named.

Questions, doubts or reports: christophermarl168@gmail.com

Christopher Marlowe Suarez MacalinoCreator of Sender Extreme · Architect
Poipet, Cambodia
1 October 2026

Why I made Sender Extreme

My goal was to create a unique messaging app made by a Filipino — fast, private and with every feature free for everyone. I built Sender Extreme myself as a prototype, and I am testing it first with people I know.

I plan to publish Sender Extreme on the Google Play Store as soon as it meets Google’s requirements and passes Google’s review. Until then it is downloaded from this website, which is why your phone or computer may show the warnings explained below.

Why your phone or computer shows a warning

These warnings appear for every app that does not come from an official store or from a large company with a paid signing certificate. They do not mean that Sender Extreme is harmful — and you can check the files yourself in the next section.

🤖

Android

  • “This type of file can harm your device” in Chrome — shown for every APK file downloaded from a website.
  • “Install unknown apps” — Android asks you to allow installing from outside the Play Store, for any app.
  • Google Play Protect may say it does not recognise the app, or offer to scan it. That is because Sender Extreme is new and not on the Play Store yet. You can let Play Protect scan it.
🪟

Windows

“Windows protected your PC” (Microsoft Defender SmartScreen) appears for programs that are new or not signed with a paid code-signing certificate. Click More info → Run anyway. You can also scan the file with Microsoft Defender first: right-click it → Scan with Microsoft Defender.

🍎

iPhone and web

No warning: on iPhone and in a browser, Sender Extreme runs as a web app from this website, with nothing to install.

Check the files yourself

Every file has a SHA-256 fingerprint: a code that changes completely if even one letter of the file changes. If the fingerprint of your download matches the one below, you have the genuine, unchanged file.

FileSHA-256 fingerprint
Android app
SenderExtreme.apk
Loading…Check on VirusTotal →
Windows installer
SenderExtreme-Setup.exe
Loading…Check on VirusTotal →
Windows portable
SenderExtreme.exe
Loading…Check on VirusTotal →
Android signing certificate
the same for every version
63:07:06:FA:A9:6E:A6:AC:AB:E4:D5:0A:47:81:30:5F:6C:23:20:59:DF:6E:3B:81:83:FF:E2:A6:E5:62:A5:E7

The fingerprints are read from this website’s current release.

Scan with VirusTotal (free, by Google)

  1. Go to virustotal.com and choose File.
  2. Upload the file you downloaded. More than 60 antivirus programs check it at once.
  3. The result page shows the file’s SHA-256 — compare it with the table above. For the Android app, the Details tab also shows the signing certificate.

Check the fingerprint on a Windows PC

Open Command Prompt in your Downloads folder and type:

certutil -hashfile SenderExtreme-Setup.exe SHA256

What the Android app asks to use, and why

PermissionUsed only for
CameraVideo calls, photos and video messages, stories, live streaming, scanning QR codes
MicrophoneCalls, voice messages, voice typing, live streaming
NotificationsNew messages and incoming calls
Contacts (you are asked first, only when you tap “Find friends from my phone contacts”)Showing which people in your phone’s contacts already use Sender Extreme. Their phone numbers are compared with Sender Extreme accounts and are not stored on the server or shared with anyone. You can stop it at any time.
Photos and videosSending pictures you choose from your gallery
Run in the background, start after restartReceiving messages and calls when the app is closed (website version). The Google Play version uses Google Play push instead, encrypted so only your phone can read it.
Alarms & reminders (you are asked first)The optional scheduled auto-open and auto sign-out, at the exact time you choose
Ignore battery optimisation (you are asked first)Stopping the phone from cutting off message delivery to save battery
Full-screen notificationsShowing an incoming call on the lock screen
Display over other appsThe optional edge-lighting alerts, the floating live-stream window and opening the app at a scheduled time
FingerprintThe optional app lock
FlashlightThe optional camera-flash alert for new messages
Install appsInstalling Sender Extreme’s own updates when you tap Update

Sender Extreme reads your contacts only when you ask it to find friends from them (see above), and does not ask for your location in the background, your SMS messages or your call log. Sharing your location in a chat happens only when you choose it.

Supabase and Netlify: the companies behind the servers

Sender Extreme does not run its own servers. It uses two established, independently audited cloud companies that host apps and websites for developers and large companies worldwide.

Supabase supabase.com

Stores Sender Extreme accounts, messages and shared files, and handles sign-in.

  • United States company, founded in 2020, with offices in San Francisco and Singapore (Sacra).
  • Open-source database platform built on PostgreSQL, managing more than 1 million databases (Sacra).
  • Independently audited: SOC 2 Type 2 since May 2023, and HIPAA compliant (Supabase).

Netlify netlify.com

Hosts this website, the web version of the app and the download files at sender-extreme.netlify.app.

  • United States company, founded in 2014, headquartered in San Francisco (Wikipedia).
  • Used by large companies such as Verizon, Nike, Samsung and Atlassian (Wikipedia).
  • Independently audited: SOC 2 Type 2 since 2019 and ISO 27001 certified since 2022 (Netlify).

Cloudflare Pages cloudflare.com

Hosts the official second address sender-extreme.pages.dev: exactly the same website and download files.

  • Independently audited: SOC 2 Type II since 2019 (Cloudflare).

To be honest about it: anyone can host a website on Netlify or Cloudflare, so a netlify.app or pages.dev address by itself does not prove a site is safe. That is exactly why this declaration and the file checks above exist. All connections to Supabase, Netlify and Cloudflare are encrypted (HTTPS).

How to recognise the real Sender Extreme

The real Sender Extreme:

  • is downloaded only from sender-extreme.netlify.app, sender-extreme.pages.dev or Google Play;
  • has the Android signing certificate shown above;
  • is contacted only through christophermarl168@gmail.com or the creator account inside the app.

Be careful — it is not Sender Extreme if someone:

  • asks you to pay to download, unlock or “activate” the app;
  • asks for your password, a verification code, or your bank card number;
  • sends you an app file from a different website or by private message.

Honest limits

Sources