Privacy

The app without an account

Hosts, settings and history stay on the computer. Passwords, private keys and API keys live in the system keychain (Keychain on macOS, Credential Manager on Windows) and never reach Shellden's servers in readable form.

The app sends no usage data. It asks the update server whether a newer version exists, sending its version, its platform and an anonymous computer identifier used to stage updates.

Requests to cloud providers and AI providers go straight from the app to them, with the credentials set in the app. Shellden's servers are not in that path.

With an account

The email address, and a record of each sign-in (time, IP address, browser) kept 30 days after it ends. Passkeys keep only their public key.

Up to three computers per account: the name given to each, its operating system, the app version and when it was last seen.

For Pro: the Stripe customer reference that ties the account to its payments, and each payment's amount and date. Stripe sells Pro as merchant of record: it collects the billing name, address and payment details itself, under its own privacy policy; card numbers never reach Shellden.

Support tickets, the files attached to them, and a log of the emails Shellden sends (kept 90 days).

With sync on (Pro)

Sync stores one copy of hosts, folders, snippets, portable settings, passwords and keys, encrypted on the computer with a passphrase Shellden never receives. Shellden cannot read the copy and cannot recover a lost passphrase.

Beside the copy, Shellden keeps its size, when it last changed, the name of the computer that made it, and when each computer last synced. The last three versions are kept; older ones are deleted.

Deleting the synced copy in Settings → Sync, or deleting the account, removes every version.

Why

To provide the account, the license and support (performance of the contract); to keep sales records (legal obligation); and to stop abuse of public forms (legitimate interest).

Who else processes it

Stripe, the merchant of record for Pro (checkout, tax, receipts and invoices, payment support through Link), Cloudflare (network protection, the anti-bot check on forms, file delivery, storage of the encrypted sync copies), the email provider that delivers Shellden's messages, and the hosting provider of Shellden's servers. None of them may use the data for anything else.

How long

While the account exists. Deleting the account in the account area removes the email, computers, sign-in factors, tickets and synced copies at once. Invoices and sales records stay for the period tax law requires (up to ten years), tied to an anonymous record.

Cookies

Two cookies, both needed to sign in: the session and its anti-forgery companion. No analytics, no advertising, no tracking.

Rights

Access, export, correction and deletion are available in the account area or by writing to [email protected]. People in the EU and UK may also object to processing and complain to their data protection authority.