Privacy Policy

Last updated 11 November 2026

In short: we keep only what is needed to run your account and show you your own usage history. We never store your server passwords, keys or files, we don’t sell data, and you can delete everything at any time.

What we collect

Account details: your name and email address. If you sign in with Google: your Google account ID and profile picture link. If you use a password: a one-way scrypt hash of it (we cannot read your password).
Connection history: for each connection you open: protocol, server address and port, the username you logged in with, start and end time, the amount of data transferred and the number of operations. This powers your “My account” dashboard.
Technical data: your IP address and browser type are used while you use the service for security (for example rate-limiting sign-in attempts) and for the operator’s live status view. They are not written to the account database.
Cookies and local storage: a sign-in cookie (keeps you logged in, 30 days), a browser identifier cookie (counts active users), and preferences stored in your browser (theme, sound settings, saved sites without passwords).

What we do not collect

Your server passwords, private keys, cloud secret keys or connection strings are not saved to our database. They stay in memory only while your connection is open.
We do not keep copies of your files. Files pass through the service only while you transfer, edit or preview them.
We do not use advertising or third-party tracking, and we do not sell or rent your data.

How we use it

To create and secure your account, send confirmation and password-reset emails, show your usage history and dashboard, keep the service safe and working, and answer your questions.

Sharing

We share data only with providers needed to run the service: the email provider that delivers confirmation and reset emails and, if you choose it, Google for sign-in. We disclose data if required by law.

Retention and deletion

Your data is kept while your account exists. You can delete your account at any time from My account; this immediately and permanently deletes your profile, sign-in sessions and connection history. Unconfirmed accounts may be removed automatically.

Security

Passwords are hashed with scrypt, sign-in and email tokens are stored only as hashes, sessions use secure HttpOnly cookies, and previews run in an isolated sandbox. No system is perfectly secure, so please use a strong, unique password.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete your data and to object to processing. Most of this you can do yourself in My account; for anything else, contact the operator of this service.

Children

The service is not intended for children under 16, and we do not knowingly collect their data.

Changes

We will post updates to this policy on this page and tell you about significant changes by email or on the website.