隐私政策Privacy Policy
Shellby 以「隐私优先」为设计原则。简单说:我们不收集你的任何数据,也不追踪你。
1. 我们不收集什么
Shellby 不含任何分析、遥测、广告或第三方追踪 SDK。App 的隐私清单声明「不追踪、不收集任何数据类型」。我们不设账号、不要求注册,因此也没有可供我们收集的个人信息。
2. 你的数据存在哪里
- 本地优先:主机、分组、标签、设置等配置默认只保存在你的设备上。
- 凭证:密码与私钥交由所在平台的系统级安全存储保管,不以明文形式落盘—— iOS / iPadOS / macOS 为钥匙串(Keychain),HarmonyOS NEXT 为关键资产存储(Asset Store Kit), Android 为受 Android Keystore 保护的加密存储。
3. 同步(可选,默认关闭)
Shellby 提供两条互斥的同步链路,均需你主动开启,且都不经过开发者的服务器——我们不运营任何同步服务。
- iCloud 同步(仅 Apple 设备):主机与分组经 Apple CloudKit 私有库同步,密码与可同步私钥经 iCloud 钥匙串端到端加密同步到你登录同一账号的设备。这些数据由 Apple 依据其隐私政策处理,开发者无法读取。
- 第三方存储同步(跨平台,含 HarmonyOS NEXT / Android / Windows / Linux):由你填入自己的 WebDAV 或 S3 兼容对象存储账号,数据同步至你自己的存储空间。凭证在离开设备之前即完成端到端加密,密钥由你设定的口令派生且只存在于你的设备上;存储服务商与开发者都只可能见到无法解读的密文。
两条链路均可随时在设置中关闭。
4. SSH 连接
Shellby 是纯客户端:所有 SSH / SFTP 连接由你的设备直接连向你自行配置的服务器。我们不运营任何服务器,不代理、不中转、不记录你的会话内容或凭证。
5. 关于本网站
- 本网站为静态站点,托管于 Cloudflare Pages;托管商可能按其政策记录常规访问日志(如 IP、时间),用于安全与运维。
- 本站使用浏览器
localStorage仅保存你的语言偏好,不使用追踪 Cookie、不投放广告。 - 本站启用 Cloudflare Web Analytics 统计页面访问量。它不使用 Cookie、不做跨站追踪、不生成访客画像,仅产出聚合的访问统计。此项仅涉及本网站,与 App 无关——App 内不含任何分析或遥测组件。
- 本站字体经 Google Fonts 加载,加载时你的 IP 对 Google 可见;如你介意,可在浏览器侧屏蔽。
6. 儿童
Shellby 面向开发者与运维人员,不面向 13 岁以下儿童,也不会有意收集其信息。
7. 政策变更
若本政策有实质性更新,我们会更新本页的「生效日期」。继续使用即表示接受更新后的政策。
8. 联系我们
有任何隐私相关问题,请联系:shellby@appsupport.mahui.me。
Shellby is built privacy-first. In short: we collect none of your data, and we don’t track you.
1. What we don’t collect
Shellby contains no analytics, telemetry, ads, or third-party tracking SDKs. The app’s privacy manifest declares “no tracking, no data types collected.” There are no accounts and no sign-up — so there is no personal information for us to collect.
2. Where your data lives
- Local first: hosts, groups, tags and settings are stored only on your device by default.
- Credentials: passwords and private keys are held by the system-level secure storage of each platform and are never written in plaintext — the Keychain on iOS / iPadOS / macOS, the Asset Store Kit on HarmonyOS NEXT, and Android Keystore-backed encrypted storage on Android.
3. Sync (optional, off by default)
Shellby offers two mutually exclusive sync paths. Both require you to turn them on, and neither passes through the developer’s servers — we run no sync service.
- iCloud Sync (Apple devices only): hosts and groups sync via Apple’s private CloudKit database; passwords and syncable keys sync end-to-end encrypted via the iCloud Keychain to devices on your account. This data is handled by Apple under its privacy policy and is not readable by the developer.
- Third-party storage sync (cross-platform, incl. HarmonyOS NEXT / Android / Windows / Linux): you supply your own WebDAV or S3-compatible object storage account, and data syncs into your own storage. Credentials are end-to-end encrypted before they leave the device, with the key derived from your passphrase and kept on your devices only; the storage provider and the developer can only ever see opaque ciphertext.
Either path can be turned off anytime in Settings.
4. SSH connections
Shellby is a pure client: all SSH / SFTP connections go directly from your device to the servers you configure. We run no servers and do not proxy, relay, or log your session contents or credentials.
5. About this website
- This is a static site hosted on Cloudflare Pages; the host may keep standard access logs (e.g. IP, timestamp) per its policy for security and operations.
- The site uses browser
localStorageonly to remember your language preference. No tracking cookies, no ads. - The site uses Cloudflare Web Analytics for page-view counts. It uses no cookies, no cross-site tracking, and builds no visitor profiles — only aggregate statistics. This applies to the website only and not to the app, which ships without any analytics or telemetry.
- Fonts are loaded via Google Fonts, which makes your IP visible to Google at load time; block it browser-side if you prefer.
6. Children
Shellby is intended for developers and operators, not for children under 13, and does not knowingly collect their information.
7. Changes
If this policy changes materially, we’ll update the “Effective” date above. Continued use means you accept the updated policy.
8. Contact
For any privacy question, contact shellby@appsupport.mahui.me.