Privacy policy

Last updated:

This policy covers the SSHMount app for macOS and this website. It is short because there is very little to describe: the app collects nothing, and the site sets no cookies.

This page must be reviewed and completed by the site owner before publication: the highlighted fields carry a legal identity that no generator can decide.

What the app collects: nothing

SSHMount does not collect personal data, does not track you, and contains no third-party analytics SDK. This is what the PrivacyInfo.xcprivacy privacy manifests shipped with the app and with its File Provider extension declare, and Apple publishes those declarations on the App Store product page where you can verify them independently.

The single declared API category is file timestamps, used for the files the app manages itself. There is no advertising identifier, no device fingerprint, no usage telemetry and no crash reporting service of ours.

Your credentials never reach us

Passwords, SSH private keys and passphrases are stored on your Mac, in the macOS Keychain, inside an access group shared between the app and its extension. They are never written to disk in the clear and never transmitted anywhere except to the server you configured, over the SSH connection you asked for.

We have no technical means of reading them. There is no account, no backup of your settings on our side, and nothing to recover if you lose them.

Your connections go straight to your own server

SSHMount opens a connection from your Mac directly to the host you entered. There is no relay, no proxy, no intermediate server operated by us, and no cloud storage of any kind on our side. If this project stopped existing tomorrow, the connection between your Mac and your machines would be unchanged.

File contents travel only over that connection. Temporary local copies materialised by the macOS File Provider — the mechanism that makes a remote file openable by a local app — stay on your Mac, under macOS's control.

Purchases are handled by Apple

Subscriptions are sold and processed by Apple through the App Store. We never see your name, your card, your billing address or any other payment detail. What reaches us from Apple is your subscription status, so the app can unlock Pro features, and the aggregate sales reports Apple provides to every developer.

Apple's own privacy policy governs that transaction.

This website

No cookies are set by this site — not for analytics, not for preferences, not for anything. That is why you are not being asked to dismiss a consent banner.

No fonts, scripts, stylesheets or images are loaded from third-party servers, so no third party learns that you visited. The page uses the typeface your operating system already provides.

If you choose to dismiss the “this page is available in your language” notice, that choice is remembered in your browser's localStorage — on your device, readable only by this site, and never sent anywhere.

The launch mailing list

Until the app is published, this site offers a “notify me at launch” form. As configured today, that form opens your own mail application with a one-line message already written: nothing is submitted to a third party, and the address exists only in the email you choose to send. We keep it until the launch announcement has gone out, then delete it. Ask us to remove it sooner at support@sshmount.it and it is gone the same day.

Server logs

This site runs no analytics product and produces no traffic statistics. The hosting provider keeps ordinary web server logs for security and troubleshooting, as every web server does; they are not used to build a profile of you, and no report is generated from them.

Your rights under the GDPR

Where the GDPR applies, you have the right to ask for access to any personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. You also have the right to lodge a complaint with your national supervisory authority.

In practice, the only personal data we can ever hold is an email address you typed in yourself, and one message asking for it to be deleted is enough.

Data controller

The data controller is Secure Password Manager LTD, [[REPLACE: indirizzo completo]]. For any request about this policy, or to exercise any of the rights described above, write to support@sshmount.it.

Changes to this policy

If this policy changes, the date below changes with it, and the change is described on the changelog page rather than applied silently.