Privacy policy

Last updated: 29 August 2026

Shellter is a local-only SSH, SFTP and FTP client for iOS and Android. It has no servers of its own. This policy explains what the app keeps on your device and why none of it goes anywhere else.

What Shellter collects

Nothing. No personal information, no usage statistics, no crash reports, no device or advertising identifiers, no contact details. There is no sign-up, and the app has no way to send data to the developer.

What Shellter stores, and where

Everything the app saves stays in its private storage on your device:

• Passwords, private keys and key passphrases — in the platform keychain or keystore (iOS Keychain, Android EncryptedSharedPreferences), hardware-backed on devices that support it.
• Connection details — the label, hostname, port, username and protocol you enter, in a local database inside the app’s private container.
• Pinned SSH host-key fingerprints — in that same local database.
• App preferences — your theme and terminal font size, in a file in the app’s private container.
• Files you download — in a Downloads folder in the app’s documents area, which you can open from your device’s file manager.

None of it is transmitted anywhere, synced to a cloud, or shared with the developer or any third party.

Your credentials stay on one device

On Android, the app opts out of Google cloud backup and of device-to-device transfer. On iOS, credentials are stored with kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly, so they are not carried into an encrypted backup and cannot be restored onto a different device. Saved credentials do not leave the phone they were entered on.

Network connections

Shellter connects only to the servers you configure, on the ports you specify, to carry SSH, SFTP or FTP traffic. It makes no other network requests: no telemetry endpoint, no update check, and no analytics or advertising SDK is present in the app.

If you connect to a server on your local network, iOS will ask for local network permission. That permission is used solely to reach the host you entered.

Third-party services

None. Shellter contains no third-party analytics, advertising or crash-reporting SDKs.

Deleting your data

Deleting a connection removes its stored password and key material from the keychain at the same time. Uninstalling Shellter removes everything the app stored, including all saved credentials and pinned host keys. Because none of it was ever transmitted, there is nothing for you to request the deletion of elsewhere.

Children

Shellter is a developer tool and is not directed at children. It collects no data from anyone, including children.

Changes to this policy

If this policy changes, the updated version will be published at this address and the date at the top will change.

Contact

Questions about this policy: maksutiiomer@gmail.com