Privacy Policy
This Privacy Policy explains how the Sheltora application and the sheltora.com website (together, the “Software”) handle your data. Sheltora is operated by Tomas Hrdy (“we”, “us”). Sheltora is built privacy-first: no account, no telemetry, no tracking, no advertising.
1. The short version
Your connections, sessions, credentials and keys stay on your device. We do not run analytics, do not profile you, and do not sell or share your data. The only information that ever reaches us is what you choose to send us (for example a bug report) and the standard technical request logs needed to deliver updates and the website.
2. Data stored on your device
The app stores the following locally on your computer only:
- your sessions, folders, credential profiles, port-forward rules and connection history;
- saved passwords and key passphrases, kept in an encrypted vault (OS-protected via Windows DPAPI / macOS Keychain, or a master password using Argon2id);
- application settings and window state;
- optional per-session output logs, only if you enable logging.
This data is never transmitted to us. It is sent only to the servers you choose to connect to, as part of making those connections. You can export it yourself into an encrypted portable file; that file stays under your control.
3. Network connections the app makes
- Servers you connect to — SSH, SFTP, FTP/FTPS, S3, RDP, VNC and Telnet hosts you enter. Traffic goes directly to those servers; it does not pass through us.
- Update checks — the standalone (non-Store) build contacts releases.sheltora.com to check for and download updates. This reveals your IP address, app version and operating system to the update host, like any download. The Microsoft Store build updates through the Store instead and does not contact our update server.
- Bug reports (optional) — if you use the “Report a bug” form, the text you type, plus the app version, OS and your IP address, is emailed to us so we can fix the issue. The form is protected by a Cloudflare Turnstile challenge.
4. What we receive
We do not collect personal data automatically. The only data that reaches us is:
- Bug reports you voluntarily submit (see above), kept only as long as needed to investigate and fix the issue;
- Technical request logs generated when your app or browser contacts our update host or website — standard server/CDN logs (IP address, timestamp, requested file, user agent) used for delivery, security and abuse prevention.
5. Service providers
- Cloudflare — hosts/serves the website and update files and routes traffic; processes the technical request logs above on our behalf.
- Seznam.cz (e-mail) — delivers bug-report messages to our mailbox.
- Microsoft Store — if you installed Sheltora from the Store, Microsoft handles the install, updates and any related data under Microsoft’s Privacy Statement.
6. Cookies & analytics
The website uses no analytics and no advertising cookies. The only third-party element is the Cloudflare Turnstile challenge on the bug-report page, used solely to block automated abuse.
7. Children
Sheltora is a developer/IT tool and is not directed at children under 13, and we do not knowingly collect data from them.
8. Your rights
Because we hold almost no personal data, there is little to request. If you sent us a bug report and want it deleted, contact us and we will remove it. Depending on your jurisdiction (e.g. the EU/EEA under GDPR) you may have rights to access or erase the limited data described above.
9. Changes
We may update this policy from time to time. The current version is always available at sheltora.com/privacy.
10. Contact
Questions about privacy: [email protected].