Keep your phone online. Close one app’s gate.Choose a listed app and refuse its Wi-Fi and mobile connections, while NetCage lists available apps that request internet access and Show system apps adds eligible system apps. Android’s VPN slot stops the selected app on this phone. Uncaged apps keep their normal route.Can one app go offline?Yes. Cage an app, and NetCage refuses its foreground and background connections. Release it, and Android gives its normal network route back straight away.Wi-Fi, mobile, or both?Choose Wi-Fi, mobile data, or both for each rule. NetCage applies the rule for the phone’s current default network rather than inspecting each socket’s transport.Can the gate follow a schedule?Group apps in a profile, apply them together or set chosen days and times; a day pass opens the gate temporarily, then restores the cage when the pass ends.What does the tunnel read?To address its refusal, NetCage reads the IP and transport-header fields needed for the reply, in memory. It does not read payload contents, resolve a hostname or keep a browsing record.You already know which appNetCage is for the moment when your phone should stay online, but one selected app shouldn’t. Pick it, close the gate and carry on. NetCage does not score your habits or decide which apps deserve access.Local firewall, optional online featuresCaged connections end on this phone, and apps outside a caged Android UID do not enter NetCage’s tunnel. NetCage itself can connect for optional accounts, backup, support, telemetry, push, updates, custom icons and Cage Packs; the privacy policy explains each flow.Follow the route you needExplore the controls. See how Android’s VPN slot does the work, or open the public documentation for setup and troubleshooting.