Legal
Privacy
0.1.1 does not require an account. The site is a download and docs origin. The app is local-first.
What stays on the machine
Host profiles, host-key pins, tunnels, snippets, and the vault live under the app data directory. Secrets are AES-256-GCM. The Windows master key is DPAPI-protected. We do not operate a telemetry pipeline in this build.
What can leave the machine
- SSH, SFTP, FTP, and tunnel traffic you start — to the hosts you typed.
- Optional assistant calls — to the OpenAI-compatible endpoint you configured. Terminal output is redacted for tokens before send. Off is the default.
- Optional cloud sync — ciphertext only, to https://terminal.klyrn.com/api/v1. Unsigned-in still works.
- This website — normal HTTPS logs on the origin that serves the zip and docs.
What we do not collect as a product account
There is no signup in 0.1.1. Download is not tied to an identity. Do not send private keys or passwords to support.