Privacy: what Conchshell sends and what never leaves your machine

Usage statistics, every three hours while it runs: a permanent identifier of this installation, the date of the first launch, the app version, the system and its major version, the build architecture, the interface language, whether a licence is active, whether a session has ever been opened, on a computer whether the Security tab has ever been opened and “Buy a licence” pressed, how many connections are saved and how many sessions of each kind were opened since midnight UTC (both in ranges), and the kind of the last failed connection since then. The identifier comes from a random secret kept in the app’s data folder and never sent; it survives updates and switching statistics off and on. On by default; switched off in Settings → Advanced (labelled “Anonymous usage statistics” in version 2.16 and earlier), where “What is sent” shows the exact request.

An update check when the desktop app starts — a request for the latest version number that carries no app version, platform or identifier. A new version is downloaded only when you choose to install it. It cannot be switched off yet; the switch arrives in the next version.

The list of changes, after each update, until it has been shown.

A licence check, only on a copy with a licence key: after each launch and then daily while it runs, the app downloads the signed list of revoked licences. It carries nothing about you or the key, and it stops when you remove the key. Entering a short licence code sends that code to conchshell.app to exchange it for a key.

The full list, with how long everything is kept, is in the privacy policy.

Connections, hosts, keys, credentials, layouts, themes, transfer history and logs. None of it is sent to us. Sync, if you use it, moves it encrypted only between your own devices — through a folder you choose, or directly over your local network.

The website and the application are separate things. These pages use Yandex Metrica and Google Analytics: they set cookies and collect aggregate visit statistics — which pages were opened, where the visit came from, which system and browser. Neither counter sees the application, your hosts or your connections, and nothing you type into your sessions ever reaches this website. Blocking them costs you nothing here — the site works the same either way. Downloads come from this same server, through Cloudflare, which sees your full address. Its log keeps a shortened address (IPv4 to /24, IPv6 to /56), the country, the browser string and the page requested.

Conchshell is not a company. It is one person's project, and support@conchshell.app reaches them. Questions about this website, about what it collects, or about anything on these pages — that address is the whole of it.