Shellport Privacy Policy

Last updated: 23 September 2026 · Applies to Shellport 1.1.0 and later · Contact: [email protected]

Shellport is an SSH, Mosh, Telnet, serial and SFTP client for Android. It works without an account and without a subscription. Since version 1.1.0 the free app shows one small banner ad on the host list (Google AdMob) and uses Google Analytics for Firebase to learn which features are used. This policy explains exactly what that means.

What never leaves your device

The following data stays on your device. It is sent only to the servers you connect to (for example your password or key to your own SSH server) and never to the developer, to Google Analytics or to any advertising network:

• hosts, groups, tags, addresses, ports and usernames;
• passwords, private keys, certificates, 2FA (TOTP) secrets and known hosts;
• snippets, commands you type, terminal input and output, and session logs;
• remote file names, paths and file contents (SFTP), port-forwarding rules;
• your settings, including optional AI and sync credentials.

This data is stored in a database encrypted with SQLCipher, using a random key protected by the Android Keystore. Android cloud backup and device-to-device transfer are disabled for it. Ads are never shown on terminal, SFTP, keychain, lock, settings or any other screen that can show this data.

Data collected by third-party services

Google AdMob (advertising)

One anchored banner ad is shown at the bottom of the main host list. No other ad formats are used. The ad request does not contain any content from the app. The Google Mobile Ads SDK may collect:

• the device advertising ID and app set ID;
• IP address (used to estimate an approximate location);
• device and app information (model, OS version, language, app version);
• ad interactions (impressions, clicks) and diagnostic data.

This is used to show and measure ads, limit ad frequency and prevent fraud. Ads are personalised only where you have given consent or where consent is not required by law. See How Google uses information from apps that use its services.

Google Analytics for Firebase (usage statistics)

Shellport logs anonymous usage events: which screens are opened (for example "hosts", "terminal", "settings"), and events such as a host being added, a connection succeeding or failing, SFTP being opened, a snippet being run, the banner ad loading, the consent result and in-app update/review results. These events contain only the protocol type (for example ssh), a general error category (for example timeout or auth) and counts (for example the number of hosts a snippet ran on). They never contain host names, IP addresses, usernames, keys, passwords, commands, file paths or terminal content. No user ID is set.

Firebase also collects automatically: an app instance ID, device model, OS version, language, country / approximate location derived from the IP address, app version, first open and session duration. Google keeps this data for up to 14 months.

You can switch analytics off at any time in Settings → Privacy → Share anonymous usage analytics.

Consent (EEA, UK and Switzerland)

In the European Economic Area, the United Kingdom and Switzerland, Shellport shows Google's consent form (User Messaging Platform, IAB TCF v2.2) on first launch, after the introduction and before any ad is loaded. You can change your choice at any time in Settings → Privacy → Ad privacy options. Your choice is also passed to Firebase Analytics (Consent Mode v2): until it is known, Analytics does not store any identifiers (analytics and ad storage are denied by default).

Advertising ID

AdMob and Firebase may read the Android advertising ID (permission AD_ID) for ad measurement, fraud prevention and, with consent, ad personalisation. You can reset or delete it in Android Settings → Privacy → Ads.

Google Play in-app updates and reviews

Shellport uses Google Play libraries to offer updates and, once, to show the Google Play rating card. These run inside Google Play under Google's privacy policy; the app does not learn whether or how you rated it.

Sharing and selling

Data collected by AdMob and Firebase is processed by Google LLC as described above and is sent encrypted (HTTPS). The developer does not sell personal data and operates no server that receives data from the app.

Network connections the app makes

• servers you connect to (SSH, SFTP, Mosh, Eternal Terminal, Telnet), and network tools you run (ping, port scan, DNS, whois);
• your own sync or backup destination (WebDAV / a folder you pick), if you enable it — the data is end-to-end encrypted with a passphrase only you know before it leaves the device;
• an AI provider (Anthropic, an OpenAI-compatible service or your own Ollama server) only if you enable the optional AI assistant and enter your own key; only the text you type and the context you choose to attach are sent, under that provider's own privacy policy;
• api.ipify.org only when you tap "Show public IP" in the network tools;
• Google services for ads (AdMob), consent (UMP), analytics (Firebase) and Google Play updates/reviews, as described above.

Deleting your data

Everything stored by the app is on your device: Android Settings → Apps → Shellport → Storage → Clear data, or uninstall the app. To delete analytics data linked to your installation, see shellport.malikoglu.az/delete-data/.

Permissions

• Internet / network state: to connect to your servers, and to load the banner ad and send analytics.
• Advertising ID: used by AdMob and Firebase as described above.
• Notifications and foreground service: to keep sessions, port forwards and transfers running in the background.
• Location (optional, asked only when you tap it): Android requires it to read the Wi-Fi network name for per-network rules.
• USB / NFC: for serial adapters and hardware security keys.
• Biometrics: to unlock the app or confirm the use of hardware-backed keys.

Children

Shellport is a technical tool for adults and is not directed at children. Ads are not targeted at children.

Changes

Changes to this policy will be published at this address with a new date.

Qısa xülasə (AZ)

Hesab və abunə yoxdur. 1.1.0-dan host siyahısının altında bir kiçik banner reklam (Google AdMob) göstərilir və anonim istifadə statistikası (Firebase Analytics) toplanır. Hostlar, istifadəçi adları, parollar, açarlar, əmrlər, fayllar və terminal məzmunu cihazdan yalnız qoşulduğunuz serverlərə gedir — heç vaxt analitikaya və ya reklama göndərilmir. Analitikanı Ayarlar → Məxfilik bölməsində söndürə bilərsiniz; AB/UK-da reklam razılığı eyni yerdən dəyişdirilir.

Kısa özet (TR)

Hesap ve abonelik yok. 1.1.0 sürümünden itibaren sunucu listesinin altında küçük bir banner reklam (Google AdMob) gösterilir ve anonim kullanım istatistikleri (Firebase Analytics) toplanır. Sunucular, kullanıcı adları, parolalar, anahtarlar, komutlar, dosyalar ve terminal içeriği yalnızca bağlandığınız sunuculara gider — asla analiz veya reklam için gönderilmez. Analizi Ayarlar → Gizlilik bölümünden kapatabilirsiniz; AEA/Birleşik Krallık'ta reklam onayı aynı yerden değiştirilir.

Краткое изложение (RU)

Без аккаунта и подписки. Начиная с версии 1.1.0 внизу списка хостов показывается один небольшой баннер (Google AdMob) и собирается анонимная статистика использования (Firebase Analytics). Хосты, имена пользователей, пароли, ключи, команды, файлы и содержимое терминала передаются только серверам, к которым вы подключаетесь, и никогда не отправляются в аналитику или рекламу. Аналитику можно отключить в разделе «Настройки → Конфиденциальность»; в ЕЭЗ/Великобритании там же меняется согласие на рекламу.