Privacy Policy
Last updated: June 7, 2026
This Privacy Policy explains how Jonas Graf ("we", "us") handles personal data for the Sshly website and app. We are privacy-first: the desktop app is local-first and we collect as little as possible.
1. Controller
Jonas Graf, Moosstr. 7, 78467 Konstanz, Germany — hello@sshly.app is the controller responsible for your data under the GDPR.
2. What the desktop app does not collect
Sshly has no telemetry and no analytics. Your connections, hosts, credentials, SSH keys, and files stay on your Mac. Passwords and key passphrases are stored in the macOS Keychain; connection metadata lives in a local database on your device. We never receive your servers, credentials, or session contents.
3. Data we do process (website & licensing)
Waitlist
If you join the waitlist we store your email address, an optional beta-interest flag, your join position, and basic request metadata (referrer, IP). Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe / request deletion at any time.
Purchases & licenses
When you buy Sshly we store your email, the issued license key, order/transaction identifiers, the amount paid, and — when you activate the app — a device identifier, device name, app version and last-seen timestamp (to enforce the activation limit). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
4. Payment processing (Merchant of Record)
Payments are processed by Polar Software Inc. ("Polar"), our reseller and Merchant of Record. Polar collects your payment and billing details directly and acts as an independent controller for that data. We receive only the information needed to deliver and support your license (e.g. email, country, order id). See Polar's privacy policy at polar.sh/legal/privacy.
5. Processors & recipients
- Polar — payments, invoicing, tax (Merchant of Record).
- Email delivery provider — to send your license key and waitlist updates.
- Hosting provider — to operate the website and license API.
We do not sell your data. Where processors are outside the EU/EEA, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.
6. Retention
Waitlist data is kept until you unsubscribe or ask for deletion. License and order records are kept for the lifetime of the license and as required by tax/commercial law (in Germany, generally up to 10 years for invoices).
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time. To exercise any right, email hello@sshly.app. You also have the right to lodge a complaint with your data-protection supervisory authority.
8. Cookies
The website uses only a strictly necessary session/CSRF cookie. We do not use advertising or third-party tracking cookies. Polar's checkout may set cookies needed to process your payment.
9. Changes
We may update this policy; the current version is always available here with its "last updated" date.
Jonas Graf · Moosstr. 7, 78467 Konstanz · Germany
Contact: hello@sshly.app
· VAT ID: DE338294379
Terms ·
Privacy ·
Refund