K-ShellPrivacy Policy
Last updated 3 November 2026
In short
- The app collects nothing. There is no account, no telemetry and no analytics. Your hosts, passwords and keys stay on your computer, encrypted.
- Downloading never requires signing in.
- On this website you can sign in with Google to get release emails. That is optional. If you do, we store the details below, and you can delete them yourself at any time.
What we collect when you sign in
| Data | Why |
|---|---|
| Name, email address and profile photo from your Google account | To identify your account and, if you opt in, to email you about new releases |
| Whether you want release emails | To respect your choice. It is off unless you tick the box |
| Your operating system and browser language | To decide which platforms and translations to prioritise |
| Which installer you downloaded, which version and when | To understand how K-Shell is used across platforms |
| When you first and last signed in | To keep the data accurate |
We do not receive your Google password, contacts, files or any other Google data. We don't sell your data, share it for advertising, or combine it with other sources.
Legal basis
We process this data only with your consent, which you give by signing in. Release emails require a separate opt-in. This follows Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022) and Article 6(1)(a) of the EU GDPR. You can withdraw consent at any time by deleting your data, as described below.
Where it is stored
Sign-in is handled by Google Firebase Authentication. Your profile is stored in Google Cloud Firestore, which acts as our data processor under the Firebase Data Processing Terms. Access rules ensure that each signed-in visitor can only read their own record, and only the project maintainers can see the full list.
How long we keep it
Until you delete it, or until you ask us to delete it. If the sign-in feature is ever removed, we will delete all stored profiles.
Your rights
- Delete: sign in on the download section and click Delete my data. This removes your profile, your download history and your sign-in account immediately.
- Stop emails: untick Release emails. Every release email also includes an unsubscribe link.
- Access, correct or export: contact us (below) and we will reply within 14 days.
- You may also complain to your data protection authority.
Other services this website uses
Like any website, these services receive your IP address and browser details when the page loads:
- Cloudflare: delivers this website and protects it from abuse.
- GitHub: its API provides the latest release information, and installer files are downloaded from GitHub Releases.
- Google Firebase: loaded only when sign-in is enabled.
The site sets no advertising or tracking cookies. Firebase stores your sign-in session in your browser's local storage only after you sign in.
Contact
Questions or requests: open an issue on GitHub.
Changes
If this policy changes, we will update the date above. For significant changes, we will also notify signed-in users who opted in to emails.