FleetshellPrivacy Policy
Summary
Fleetshell (“the App”) runs on your computer. It has no account, no analytics, no advertising and no crash reporting, and the developer, Richard Pham, receives nothing from it.
What the App keeps, and where
- Hosts come from the inventory files and ~/.ssh/config you point the App at. It reads them and never changes them.
- Passwords, key passphrases, cloud access keys and client secrets are kept in the system’s credential store (macOS Keychain, Windows Credential Manager, or the Secret Service on Linux), never in a plain file.
- Private keys made or imported in the App are encrypted on disk; the key that unlocks them is in the credential store. Secure Enclave keys never leave the chip.
- Settings (tunnels, which inventories to read, snippets, recent hosts, command history, host keys you accepted) are in the App’s data folder on your computer.
- Backups you export are encrypted with a passphrase you choose and saved where you choose.
Where the App connects
- The SSH servers you open, directly from your computer.
- If you add a cloud account (Pro): the provider’s own APIs and tunnel services, with the credentials you give it: Amazon Web Services (EC2, Systems Manager, IAM Identity Center), Google Cloud (Compute Engine, OS Login, Identity-Aware Proxy) and Microsoft Azure (Entra ID, Resource Graph, Bastion).
- The store you bought Pro from (Apple, Microsoft), to check the purchase. The developer receives no payment details.
The App runs no server in between and sends nothing to the developer.
This website
fleetshell.richardpham.com is a static site on Cloudflare Pages. It sets no cookies, runs no analytics and loads nothing from other sites. Cloudflare keeps standard request logs as the host.
Children
The App collects no personal information from anyone, including children.
Changes
If this policy changes, the new version is posted here with a new date.