Privacy Policy

Last updated: April 19, 2025

BastionSSH ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information BastionSSH collects, how it is used, and your rights regarding that information. Please read it carefully.

1. The Short Version

BastionSSH is a local-first application. The vast majority of your data — connection credentials, SSH keys, terminal sessions, tunnels, and snippets — never leaves your Mac. We do not sell your data. We do not track your usage inside the app.

2. Information We Collect

2.1 Information You Provide

When you use BastionSSH, you may enter the following information to configure connections:

• Server hostnames, IP addresses, and port numbers
• SSH usernames
• Passwords and SSH key passphrases (stored exclusively in the macOS Keychain — never in our servers)
• SSH private and public keys
• Custom labels, notes, and color tags you assign to connections
• Command snippets you create
• Port-forwarding tunnel configurations

All of this data is stored locally on your Mac in the app's sandboxed container and the system Keychain. It is never transmitted to our servers.

2.2 Diagnostic & Crash Reports (Optional)

If you have enabled "Share Mac Analytics" or "Share App Analytics" in macOS System Settings → Privacy & Security → Analytics & Improvements, Apple may share anonymized crash reports and usage data with us through their standard App Store framework. This data does not include your connection details, credentials, or any personally identifiable information. You can opt out at any time in macOS System Settings.

2.3 Information We Do NOT Collect

• We do not collect any data about which servers you connect to.
• We do not record terminal session content.
• We do not store your SSH passwords or keys on any server we operate.
• We do not use in-app analytics SDKs or tracking pixels.
• We do not collect your name, email address, or any account information (there is no account to create).

3. How We Use Information

Since we collect virtually no personal data, the ways we use it are extremely limited:

• App functionality: Connection settings and credentials stored locally are used solely to establish SSH connections on your behalf.
• Bug fixes and improvements: Anonymized crash reports (provided by Apple via App Store analytics, if you opt in) are used to identify and fix bugs.

We do not use your data for advertising, profiling, or any purpose beyond providing the app's functionality.

4. Data Storage and Security

All sensitive data (passwords, passphrases, key material) is stored in the macOS Keychain, which is encrypted by the operating system and protected by your device passcode or Touch ID / Face ID. Connection metadata (hostnames, usernames, notes) is stored in the app's sandboxed local storage on your device.

We do not operate cloud sync for your connection data. Your data stays on your Mac unless you explicitly export it (e.g., back up via Time Machine).

5. Third-Party Services

BastionSSH is distributed exclusively through the Mac App Store, operated by Apple Inc. Apple's App Store policies and privacy practices govern the purchase and download process. Please review Apple's Privacy Policy for details.

The app itself does not integrate with any other third-party analytics, advertising, or data-collection services.

6. Your SSH Connections

When you initiate an SSH connection, BastionSSH uses macOS networking to establish a direct, encrypted connection between your Mac and the remote server. We have no visibility into the content of these sessions, and no data passes through our infrastructure.

7. Children's Privacy

BastionSSH is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at bastionssh@ifons.net so we can address the situation.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

📧 bastionssh@ifons.net
🌐 bastionssh.ifons.net

We will do our best to respond within 5 business days.