Privacy Policy

Last updated: April 2, 2026

Summary: ShellPad does not collect, transmit, or share your personal data. Your connection credentials stay on your device. We use Google AdMob for ads, which has its own data collection practices.

1. Data We Collect

Data stored locally on your device:

  • Connection profiles: Host, port, username, protocol, and display preferences. Stored in an on-device database.
  • Saved passwords and keys: If you choose "Saved Password" auth, the password is encrypted with AES-256-GCM and stored locally. The encryption key is stored in Android Keystore. We recommend using "Plain" auth mode which does not store passwords.
  • Known host keys: SSH server fingerprints are stored locally for Trust On First Use (TOFU) verification.

Data we do NOT collect:

  • We do not collect terminal session content or commands.
  • We do not collect or transmit passwords to any server other than the one you are connecting to.
  • We do not track your usage, connections, or activity.
  • We do not have analytics or telemetry.

2. Third-Party Services

Google AdMob

The App displays advertisements via Google AdMob. Google may collect device identifiers, IP addresses, and usage data for ad targeting and measurement. This is governed by Google's Privacy Policy.

3. Data Security

  • Saved passwords are encrypted with AES-256-GCM using a key stored in Android Keystore.
  • The app database cannot be extracted via Android backup (backup is disabled).
  • SSH connections use encrypted channels. Telnet connections are unencrypted by design.
  • SSH host keys are verified using Trust On First Use (TOFU) to detect man-in-the-middle attacks.

4. Data Retention

All data is stored locally on your device. Uninstalling the App deletes all stored data including connection profiles, saved credentials, and known host keys.

5. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect information from children.

6. Your Rights

Since all data is stored locally on your device, you have full control. You can delete individual connections or uninstall the App to remove all data.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be accessible within the App and at this URL.

8. Contact

For questions about this privacy policy, contact us at [email protected]