Localfirst SSH
DATA & PRIVACY · 30 OCTOBER 2026
Your data,
on your terms.
This page describes the current development preview of Localfirst SSH. Recheck it when installing a later release.
Your local vault
Host details, credentials, notes, commands and local editor drafts are stored in an encrypted vault on your device. The developer does not operate a vault recovery server. Keep the vault recovery key and an encrypted backup somewhere safe. Your passphrase and matching recovery key are required to recover encrypted contents.
Connections you choose
SSH and SFTP traffic goes to the servers you connect to. Those servers receive connection information and anything you send, including commands and uploaded files. Running sessions, terminal output and decrypted files may exist in memory while you work. Downloads and exported text are ordinary local files; they are not automatically encrypted by the app.
Optional sync
Sync is separately configured against a service you choose. It sends encrypted workspace objects and account/device authentication information to that service. Its operator can observe connection metadata. Provider API keys and device-local agent history are excluded from sync. Encrypted vault backups may contain additional device-local state; keep them private.
Optional AI and local agents
When you explicitly send a question to a configured AI provider, that provider receives the question and context shown in the app. Its own privacy and retention terms apply. Provider keys remain encrypted locally. Local agent access listens on loopback, uses a temporary access token and exposes only granted capabilities; commands and new connections require review. Do not grant access to an untrusted client.
Updates and support
Configured public desktop builds contact the release host only when you choose to check or download an update. The host receives normal network request information such as IP address and requested files. Downloads are authenticated with the app's pinned update key. Mobile distribution and updates are handled by the chosen app store.
There is no built-in analytics or automatic crash-report upload in this preview. Information you deliberately send through email or a public issue is handled by that service. Public issues are visible to others: do not include credentials, private server details or terminal transcripts.
This website
This static site uses no analytics scripts, account system or tracking cookies. Fonts are served with the site. The hosting provider may retain normal access and security logs. Download links may lead to GitHub, whose own policies apply.
Removing data
The app provides controls to remove library entries and clear ended agent history. Local backups and exported files remain until you remove them. Removing local data does not erase copies held by a configured sync service, remote server, AI provider or support service. Contact the relevant operator for those copies.
Contact
Public support details will be available with the first release.