Privacy
In one line: MyShell collects nothing, and the app itself never goes online. Below is exactly what is stored where, and the one case where data leaves your Mac.
What the app does not do
No account, no sign-up, no logged-in state.
No usage statistics, no behavioural analytics, no crash reporting.
No background update checks — opening the app, connecting to a server and running commands never sends us a single request.
Where your things live
Connections, shortcuts, snippets and appearance settings are files on your own Mac (~/Library/Application Support/uk.flyooo.myshell/).
Passwords, private keys and passphrases live in the macOS Keychain, encrypted by the system. Bastion logins can instead be kept in an encrypted file on this Mac; the option is under Settings → Bastion, which spells out the difference.
The file holding credentials is readable and writable by you alone (0600).
Deleting a connection or a credential deletes it. There is no copy on our side, because there never was one.
The app only connects where you point it
Your own servers, the jump hosts you configure, the JumpServer bastion you log into, and the backup target you set (a local folder or your own WebDAV server).
Every one of those is a connection you start, to your own infrastructure, and it does not pass through us.
The Local API is optional and off by default. When on, it listens on 127.0.0.1 only, so just programs on this Mac can reach it, and its access key rotates on every start. It is not exposed to the internet.
The one place that sends us anything
The feedback form on this site. What you write there, the contact detail you may add, and the time of submission are stored in our database and pushed to the author’s phone, so it can be answered and fixed.
That page uses Cloudflare Turnstile purely to keep bots out.
Skip the form and nothing ever reaches us.
About this site
The three things below happen on this website only. They have nothing to do with the MyShell app on your Mac — that still never goes online.
Analytics. Runs on our own server; nothing is handed to an ad platform. What it records: which page you opened, which link you came from, browser and OS type, screen size, and a rough region (country level) inferred from your IP. No cookies, no identifier assigned to you, and nothing that follows you once you leave this site.
Session replay. Scrolling, clicks and page changes are recorded so we can see where first-time visitors get stuck. Anything typed into a field is masked and never enters the recording — including what you write on the feedback page and the contact you leave.
Page fonts. They come from Google Fonts, so your browser makes one request to their font service when a page loads.
Installer downloads are proxied through our own domain rather than sending you to a third party. The site itself runs on Cloudflare.
If this page changes
What you are reading is the version in force, with the date it was last updated at the top. Changes that affect how data is handled go into the changelog.