Privacy policy

Controller and contact

PWODEV UG (haftungsbeschränkt), Heimgartenweg 14, 86161 Augsburg, Germany, is responsible for this website and the Termilino services it operates. Contact [email protected] for privacy questions and requests.

Data on your Mac

Termilino stores bookmarks, commands and settings on your Mac. Saved SSH passwords, key passphrases, authorizations and VPN secrets use a local encrypted vault. External key files remain where you selected them. Server credentials are used to authenticate to the server you choose.

Exports and backups are files you choose to create. Plain JSON commands and descriptions can contain sensitive text; full .termilino backups use a separate password. Keep backups and external key files under your control.

Optional Codex sharing

Connecting Codex does not by itself share your servers. When you grant access, Codex can read the shared terminal output and allowed metadata. Terminal text may include personal data or secrets printed by commands. Stored SSH passwords and private keys are not returned by the MCP interface.

Shared content is processed by your Codex client and its AI service under the terms and data controls of that service. Termilino cannot recall data already read. Use private mode or revoke access to block further reads and input.

Website, downloads and updates

Language is selected from your browser preferences on the first visit; an explicit localized link is respected. Your language choice is saved only in this browser using local storage, without cookies or transmission to third parties. Requests to load pages and packages necessarily disclose the connecting IP address to the serving infrastructure.

Application update requests go to updates.pwodev.com and identify the app, installed version, platform, architecture and stable channel. The app does not add SSH addresses, passwords, keys, terminal text or an installation identifier to this request.

Hosting and retention

PWODEV hosts the website origin and update service on its own servers in Augsburg, Germany. Website requests also pass through Cloudflare, Inc., USA, for delivery and protection. Cloudflare receives IP addresses and technical connection and request information. Processing outside the EEA is possible; see the Cloudflare privacy and processing terms linked below.

Support emails are kept for handling the request and meeting applicable retention obligations. Technical delivery and security processing is separate from optional Google Analytics.

Support, purposes and your rights

If you email support, we receive the address and content you send to answer your request. Share only the information needed; remove credentials and sensitive terminal output. Support correspondence is retained as needed to handle the request and meet applicable legal obligations.

Processing needed to deliver and secure the service or answer a request is based on the relevant contract or legitimate interests under Article 6(1)(b) or (f) GDPR, as applicable. You may request access, correction, erasure, restriction or portability where the legal conditions apply, object to legitimate-interest processing, and complain to a supervisory authority. Contact [email protected].

Google Analytics 4 (optional)

We use Google Analytics 4 to measure visits and clicks on the installer download. Processing and analytics cookies require your consent under Article 6(1)(a) GDPR and § 25(1) TDDDG. The website and downloads work without consent. Before consent or after refusal, the website sends no analytics requests to Google.

The recipient is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes usage events, page paths, cookie identifiers and browser/device information. The connection also exposes your IP address to Google; Google states that GA4 does not log or store individual IP addresses. This is pseudonymous processing, not anonymous browsing. We remove query strings and fragments from page addresses sent by our code and do not send terminal contents, SSH credentials or account identifiers. For download clicks, we also record the button location, installer version and site language. To compare campaigns, we send only validated public utm_source, utm_medium and utm_campaign labels as separate fields after consent; we do not store these labels separately in the browser. Email addresses, names and other personal data must not be used in campaign labels. Search terms, other URL parameters and advertising click IDs are not forwarded by our code.

Processing by Google LLC and subprocessors outside the EEA, including in the USA, is possible. Transfers to participating certified US recipients rely on the EU–US Data Privacy Framework adequacy decision (Article 45 GDPR); Google’s contractual standard contractual clauses apply where appropriate (Article 46 GDPR). You can request information about safeguards from [email protected] and consult Google’s linked processing terms.

The _ga and _ga_7D6SES6PQM cookies identify a browser/session for up to 28 days; our tag does not extend their lifetime on each visit. Event/user-level retention in GA4 is set to 2 months without reset on new activity. Aggregated reports have separate retention and are not deleted by that setting. Advertising personalization, Google signals and automatic enhanced measurement are disabled; our site measures page views and installer download clicks. GA4 also generates basic events such as session_start, first_visit and user_engagement automatically.

Your choice, time and notice version are stored locally as termilino.analyticsConsent for 180 days, equally for acceptance and refusal. This preference is necessary to respect your choice (§ 25(2)(2) TDDDG; Article 6(1)(c) GDPR for consent accountability). It is not sent to Google and contains no visitor identifier. Analytics settings lets you withdraw as easily as you agreed; withdrawal stops future collection and clears accessible GA cookies. It does not affect the lawfulness of earlier processing or automatically erase data already received by Google.