# Passive BLE Tracker Locator ## Description Passive BLE tracker locator with ESP32-S3, 2.4-inch TFT UI, USB-C charging, LiPo battery power, GNSS logging, 2.4 GHz BLE/Wi-Fi energy detection, passive BLE advertisement identification in firmware, and optional ADL5904 cellular-band sensing. ## Project Details - **Owner:** orestas1500 - **Created:** 4/4/2026 - **Last Updated:** 4/4/2026 - **Visibility:** Public - **Power Requirements:** USB-C 5V input with single-cell LiPo battery backup, power-path charging, 3.3V regulated system rail - **Connectivity:** Passive Wi-Fi/Bluetooth/BLE sensing, GPS logging, optional passive cellular-band sensing - **Compliance:** Passive receive-only RF detector/locator. No intentional RF transmission, no jamming, no spoofing, no pairing, no Wi-Fi association, no active interrogation. - **Human Interface:** 2.4-inch TFT tracker UI with battery indicator and signal bars - **Software:** Passive BLE advertisement scanner/classifier plus TFT UI showing tracker type, MAC, advertised name, RSSI, battery level, GNSS/logging status, and optional cellular activity - **Implementation Details:** Functional zones: RF detectors and antenna interfaces isolated from ESP32-S3 digital/display activity; USB-C used for power input only; GNSS is receive-only; cellular and 2.4 GHz detector paths are analog sense-only. ## Key Components ### D1 — [USBLC6-2SC6](https://www.flux.ai/cherepanyadima/usblc6-2sc6.md) - Role: ESD Protection - Role Details: Protects the USB-C power input against ESD/transient events - Datasheet URL: https://www.st.com/resource/en/datasheet/cd00050750.pdf - Manufacturer Part Number: USBLC6-2SC6 - Part Type: Diode - Manufacturer Name: STMicroelectronics - Package: SOT-23-6 **Pins:** - GND [pin 2] - I/O1_IN [pin 1] - I/O1_OUT [pin 6] - I/O2_IN [pin 3] - I/O2_OUT [pin 4] - VBUS [pin 5] ### DISP1 — [ILI9341](https://www.flux.ai/adrian95/ili9341.md) - Datasheet URL: https://cdn-learn.adafruit.com/downloads/pdf/adafruit-2-4-color-tft-touchscreen-breakout.pdf - Package: TFT Module - Role: Display - Role Details: 2.4-inch TFT user interface showing tracker type, Bluetooth MAC, advertised name when present, RSSI bars, battery level, GNSS/logging state, and optional cellular activity - License: https://creativecommons.org/licenses/by/4.0/ - Operating Voltage: 3.3V - Manufacturer Name: Adafruit Industries LLC - Implementation Details: SPI TFT interface only; parallel 8080 pins, SD-card detect, and resistive touch pins intentionally unused unless a later touch feature is added - Part Type: Display Module - Manufacturer Part Number: 2478 **Pins:** - 3V0 [pin 23] - C/D [pin 4] - CCS [pin 39] - CD [pin 40] - CLK [pin 24] - CS1 [pin 3] - CS2 [pin 27] - D/C [pin 28] - D0 [pin 13] - D1 [pin 14] - D2 [pin 15] - D3 [pin 16] - D4 [pin 17] - D5 [pin 18] - D6 [pin 19] - D7 [pin 20] - GND1 [pin 1] - GND2 [pin 21] - IM0 [pin 35] - IM1 [pin 36] - IM2 [pin 37] - IM3 [pin 38] - LITE1 [pin 8] - LITE2 [pin 30] - MISO [pin 25] - MOSI [pin 26] - RD [pin 6] - RST1 [pin 7] - RST2 [pin 29] - VIN1 [pin 2] - VIN2 [pin 22] - WR [pin 5] - X1- [pin 11] - X1+ [pin 9] - X2- [pin 34] - X2+ [pin 32] - Y1- [pin 12] - Y1+ [pin 10] - Y2- [pin 33] - Y2+ [pin 31] ### IC1 — [ESP32-S3-WROOM-1-N16R8](https://www.flux.ai/adrian95/esp32-s3-wroom-1-n16r8.md) - Part Type: Module - Package: Module - Role: Controller - Manufacturer Name: Espressif Systems - Implementation Details: Firmware remains passive receive-only: BLE advertisement observation only, no pairing, no GATT interrogation, no active probing, no Wi-Fi association, no spoofing, and no intentional RF transmission for tracker detection; currently unused GPIOs are intentionally left available for future expansion/debug - Software: Passive BLE advertisement scanner/classifier with tracker-type recognition, MAC parsing, advertised-name display when present, RSSI display, battery gauge integration, GNSS logging, and optional cellular activity overlay - Datasheet URL: https://www.mouser.com/datasheet/2/891/esp32_s3_wroom_1_wroom_1u_datasheet_en-2930317.pdf - License: https://creativecommons.org/licenses/by/4.0/ - Manufacturer Part Number: ESP32-S3-WROOM-1-N16R8 - Role Details: Processes passive RF detector outputs, passively scans BLE advertisements to classify known trackers when observable, reads GNSS over UART, logs data to microSD, and drives the larger TFT UI **Pins:** - 3V3 [pin 2] - EN [pin 3] - GND_1 [pin 1] - GND_10 [pin 48] - GND_11 [pin 49] - GND_2 [pin 40] - GND_3 [pin 41] - GND_4 [pin 42] - GND_5 [pin 43] - GND_6 [pin 44] - GND_7 [pin 45] - GND_8 [pin 46] - GND_9 [pin 47] - IO0 [pin 27] - IO1 [pin 39] - IO10 [pin 18] - IO11 [pin 19] - IO12 [pin 20] - IO13 [pin 21] - IO14 [pin 22] - IO15 [pin 8] - IO16 [pin 9] - IO17 [pin 10] - IO18 [pin 11] - IO19 [pin 13] - IO2 [pin 38] - IO20 [pin 14] - IO21 [pin 23] - IO3 [pin 15] - IO35 [pin 28] - IO36 [pin 29] - IO37 [pin 30] - IO38 [pin 31] - IO39 [pin 32] - IO4 [pin 4] - IO40 [pin 33] - IO41 [pin 34] - IO42 [pin 35] - IO45 [pin 26] - IO46 [pin 16] - IO47 [pin 24] - IO48 [pin 25] - IO5 [pin 5] - IO6 [pin 6] - IO7 [pin 7] - IO8 [pin 12] - IO9 [pin 17] - RXD0 [pin 36] - TXD0 [pin 37] ### J1 — [DM3AT-SF-PEJM5](https://www.flux.ai/adrian95/dm3at-sf-pejm5.md) - Package: microSD Socket - Role Details: SPI removable storage for passive RF event logs and GPS coordinates - Part Type: Connector - License: https://creativecommons.org/licenses/by/4.0/ - Datasheet URL: https://www.mouser.com/datasheet/2/185/DM3AT_SF_PEJM5_CL0609_0031_0_00_2DDrawing_00009471-1614303.pdf - Manufacturer Part Number: DM3AT-SF-PEJM5 - Implementation Details: microSD used in SPI mode with DAT1/DAT2 and card-detect switch left unconnected unless firmware later needs them - Manufacturer Name: Hirose Electric Co Ltd - Role: Storage **Pins:** - ~ [pin SWA] - ~ [pin SWB] - CD/DAT3 [pin 2] - CLK [pin 5] - CMD [pin 3] - DAT0 [pin 7] - DAT1 [pin 8] - DAT2 [pin 1] - SHIELD [pin P3] - SHIELD [pin P4] - SHIELD [pin P1] - SHIELD [pin P2] - VDD [pin 4] - VSS [pin 6] ### J2 — [UJ20-C-H-G-SMT-2-P16-TR](https://www.flux.ai/adrian95/uj20-c-h-g-smt-2-p16-tr.md) - Datasheet URL: https://www.sameskydevices.com/product/resource/uj20-c-h-g-smt-2-p16-tr.pdf - Manufacturer Part Number: UJ20-C-H-G-SMT-2-P16-TR - Role: Power Input - Implementation Details: USB-C used for power input only; DP/DN/SBU pins intentionally left unconnected to avoid active USB data functionality; CC1 and CC2 configured as sink-only pull-downs for 5V input - Role Details: USB-C sink-only connector providing 5V input; data lines unused to preserve passive-only scope - Manufacturer Name: Same Sky (Formerly CUI Devices) - Package: USB-C Receptacle - Mount: Surface Mount - Part Type: Connector - License: https://creativecommons.org/licenses/by/4.0/ **Pins:** - CC1 [pin A5] - CC2 [pin B5] - DN1 [pin A7] - DN2 [pin B7] - DP1 [pin A6] - DP2 [pin B6] - GND [pin A1_B12] - GND__1 [pin B1_A12] - SBU1 [pin A8] - SBU2 [pin B8] - SHIELD [pin SH1] - SHIELD__1 [pin SH2] - SHIELD__2 [pin SH3] - SHIELD__3 [pin SH4] - VBUS [pin A4_B9] - VBUS__1 [pin B4_A9] ### J3 — [S2B-PH-K-S(LF)(SN)](https://www.flux.ai/adrian95/s2b-ph-k-slfsn.md) - Manufacturer Part Number: S2B-PH-K-S(LF)(SN) - Role: Battery Connector - Part Type: Connector - Package: JST-PH 2-pin - Manufacturer Name: JST Sales America Inc. - Datasheet URL: https://www.jst-mfg.com/product/pdf/eng/ePH.pdf - Role Details: 1-cell LiPo battery connector; mating connector is JST PHR-2 or a standard JST-PH battery lead - License: https://creativecommons.org/licenses/by/4.0/ **Pins:** - P1 [pin 1] - P2 [pin 2] ### U1 — [NEO-M8N-0-10](https://www.flux.ai/jecstronic/neo-m8n-0-10.md) - Manufacturer Part Number: NEO-M8N-0-10 - Implementation Details: UART GNSS output to MCU for user position/time logging only; D_SEL left open for UART/DDC mode; SAFEBOOT_N left open per datasheet; USB_DM/USB_DP intentionally unused; VDD_USB tied to 3V3 to satisfy the USB supply pin while USB remains unused; reserved pins intentionally unused; passive receive-only GNSS operation only - Part Type: Module - License: https://creativecommons.org/licenses/by/4.0/ - Package: LCC - Manufacturer Name: U-blox - Role Details: Receives GPS/GNSS signals only for user location logging; no transmit function - Role: GNSS Receiver - Datasheet URL: https://www.mouser.ca/datasheet/2/1025/NEO_M8_FW3_DataSheet_UBX_15031086-3180589.pdf **Pins:** - D_SEL [pin 2] - EXTINT_/_EXTINT0 [pin 4] - GND_1 [pin 10] - GND_2 [pin 12] - GND_3 [pin 13] - GND_4 [pin 24] - LNA_EN/RESERVED [pin 14] - RESERVED_/_EXTINT1 [pin 15] - RESERVED_1 [pin 16] - RESERVED_2 [pin 17] - RESET_N [pin 8] - RF_IN [pin 11] - RXD_/_SPI_MOSI [pin 21] - SCL_/_SPI_CLK [pin 19] - SDA_/_SPI_CS_N [pin 18] - TIMEPULSE_/_TIMEPULSE1 [pin 3] - TP2/SAFEBOOT_N [pin 1] - TXD_/_SPI_MISO [pin 20] - USB_DM [pin 5] - USB_DP [pin 6] - V_BCKP [pin 22] - VCC [pin 23] - VCC_RF [pin 9] - VDD_USB [pin 7] ### U2 — [AD8313ARMZ](https://www.flux.ai/vasy_skral/ad8313armz.md) - Implementation Details: Passive 2.4 GHz detector only; firmware uses VOUT as a relative activity input for the OLED signal-strength bar and event logging without demodulation or transmission. - Datasheet URL: https://www.analog.com/media/en/technical-documentation/data-sheets/AD8313.pdf - Role Details: Logarithmic RF power detector monitoring 2.4 GHz ISM activity without demodulating or transmitting - Manufacturer Name: Analog Devices Inc. - Manufacturer Part Number: AD8313ARMZ - LCSC Part Number: C578690 - Role: RF Detector - Part Type: Integrated Circuit - Package: MSOP-8 - Package or Case Code: MSOP-8_L3.0-W3.0-P0.65-LS4.9-BL - Pin Role: Analog detector output to MCU ADC on VOUT; RF input on INHI from external 2.4 GHz antenna/filter network **Pins:** - COMM [pin 6] - INHI [pin 2] - INLO [pin 3] - PWDN [pin 5] - VOUT [pin 8] - VPOS [pin 4] - VPOS [pin 1] - VSET [pin 7] ### U3 — [ADL5904](https://www.flux.ai/kicad-part-library/adl5904.md) - Role Details: Wideband RMS/envelope power detector for passive cellular-band activity sensing only - Package or Case Code: LFCSP-16-1EP_3x3mm_P0.5mm_EP1.6x1.6mm - Pin Role: Wideband detector output to MCU ADC on VRMS; RF input on RFIN from optional cellular-band antenna/filter network - Manufacturer Name: Texas Instruments Inc. - Datasheet URL: https://www.analog.com/media/en/technical-documentation/data-sheets/ADL5904.pdf - Implementation Details: Optional wideband RF detector path only; detector output used for passive cellular activity overlay; DNC pins intentionally unused; digital outputs unused in this passive analog-detector implementation - Package: LFCSP-16 - Manufacturer Part Number: ADL5904 - Role: RF Detector **Pins:** - ~{Q} [pin 13] - CRMS [pin 9] - DECL [pin 4] - DNC [pin 6] - DNC [pin 2] - DNC [pin 8] - ENBL [pin 14] - GND [pin 17] - GND [pin 11] - Q [pin 12] - RFIN [pin 1] - RST [pin 15] - VCAL [pin 3] - VIN- [pin 16] - VPOS [pin 7] - VPOS [pin 5] - VRMS [pin 10] ### U5 — [BQ24072RGTR](https://www.flux.ai/lcsc/bq24072rgtr.md) - Manufacturer Name: TI(德州仪器) - JLCPCB Part Class: Extended Part - LCSC Part Number: C140288 - Part Type: Battery Management ICs - Role Details: USB-C single-cell LiPo charger with SYS output for always-on operation while charging - Datasheet URL: https://storage.googleapis.com/graviton-electric-symbols/document_assets/lcsc/1806131014_Texas-Instruments-BQ24072RGTR_C140288.pdf - Package: QFN-16 - Manufacturer Part Number: BQ24072RGTR - Implementation Details: USB-C 5V single-cell LiPo charger with power-path SYS output; TD tied to GND; PGOOD uses external pull-up if monitored; CHG left unconnected intentionally; TS uses local bias network and is not a floating logic node - Current: 500mA - Package or Case Code: QFN-16_L3.0-W3.0-P0.50-TL-EP - Role: Battery Charger - Product Info Url: https://lcsc.com/product-detail/PMIC-Battery-Management_TI_BQ24072RGTR_BQ24072RGTR_C140288.html **Pins:** - ~{CE} [pin 4] - ~{CHG} [pin 9] - ~{PGOOD} [pin 7] - BAT [pin 3] - BAT [pin 2] - EN1 [pin 6] - EN2 [pin 5] - EPAD [pin 17] - ILIM [pin 12] - IN [pin 13] - ISET [pin 16] - OUT [pin 11] - OUT [pin 10] - TD [pin 15] - TMR [pin 14] - TS [pin 1] - VSS [pin 8] ### U6 — [MAX17048G+T10](https://www.flux.ai/lcsc/max17048gplust10.md) - Datasheet URL: https://www.analog.com/media/en/technical-documentation/data-sheets/MAX17048-MAX17049.pdf - Implementation Details: Fuel gauge reports battery voltage and estimated state of charge to the ESP32-S3 over I2C for the TFT battery indicator - Role Details: Single-cell LiPo battery monitor providing percentage/voltage data for the UI battery indicator - Package or Case Code: DFN-8_L2.0-W2.0-P0.50-BL-EP - Manufacturer Part Number: MAX17048G+T10 - Manufacturer Name: ADI(亚德诺)/MAXIM(美信) - Part Type: Battery Management ICs - Role: Fuel Gauge - Package: DFN-8 - LCSC Part Number: C2682616 - JLCPCB Part Class: Extended Part **Pins:** - ~{ALRT} [pin 5] - CELL [pin 2] - CTG [pin 1] - EP [pin 9] - GND [pin 4] - QSTRT [pin 6] - SCL [pin 7] - SDA [pin 8] - VDD [pin 3] ### U7 — [AP2112K-3.3TRG1](https://www.flux.ai/adrian95/ap2112k-33trg1.md) - Part Type: Integrated Circuit - Datasheet URL: https://www.diodes.com/assets/Datasheets/AP2112.pdf - Implementation Details: 3.3V system regulator fed from charger SYS output to isolate the battery/USB power stage from the passive detector, GNSS, microSD, and display loads - Role: LDO - License: https://creativecommons.org/licenses/by/4.0/ - Manufacturer Part Number: AP2112K-3.3TRG1 - Package: SOT-23-5 - Manufacturer Name: Diodes Incorporated - Role Details: Regulates charger SYS output to 3.3V for ESP32-S3, detectors, GNSS, display, and microSD **Pins:** - EN [pin 3] - GND [pin 2] - NC [pin 4] - VIN [pin 1] - VOUT [pin 5] *The full schematic, PCB layout, bill of materials, and interactive design are available at [https://www.flux.ai/orestas1500/passive-ble-tracker-locator](https://www.flux.ai/orestas1500/passive-ble-tracker-locator).* --- *Generated from [https://www.flux.ai/orestas1500/passive-ble-tracker-locator](https://www.flux.ai/orestas1500/passive-ble-tracker-locator)*