How we handle
your information.

The website

The Kuberlane website is a static information site. It has no account sign-in, contact form or embedded app session. The site does not use advertising or product analytics scripts, and it does not set analytics cookies.

Like most websites, the network and hosting services delivering a page may process technical request information such as an IP address, the requested page, browser details and request time to provide and protect the service. The site is delivered through Cloudflare’s network; see Cloudflare’s privacy policy for its handling of that information.

The Windows app

Kuberlane stores server connections, groups, preferences and integration settings in the app’s local Windows data folder on your device. SSH passwords, passphrases and vault secrets are protected with Windows Data Protection API (DPAPI) for the current Windows user. Your private key file remains at the path you selected.

Kuberlane does not provide a cloud account or sync service for this data. In normal use, the app does not send your saved server list or vault contents to Kuberlane. Keep your Windows account secure and take care when backing up or sharing the app’s local data.

Integration definitions, including endpoint addresses and additional header configuration, are stored in the local app data folder. Put authentication secrets in a Vault credential rather than an additional header, and treat the local configuration as sensitive.

Connections & integrations

When you connect, Kuberlane starts the SSH client or terminal you selected on your device. Your device communicates directly with the server address you configured. Kuberlane does not relay your SSH session through a Kuberlane server.

The app may check whether saved hosts are reachable and, when an integration is enabled, send HTTPS requests to its configured JSON API on manual or scheduled sync. Those requests go from your device to the endpoint you chose and may include the credential and headers you configured. The endpoint’s operator handles that request under its own policies.

SSH host key behavior follows your setting: a new key may be accepted automatically when enabled; a changed fingerprint is rejected so you can review it.

Your choices

You choose which hosts and integrations to configure, which credentials to save, and when to connect or sync. You can edit or remove saved information in the app. Uninstalling or resetting the app may remove its local data; export or back up anything you want to keep before doing so.

Links to Microsoft Store, GitHub or other services take you to those providers. Their own privacy notices apply when you use their services.

Contact

For privacy enquiries, email [email protected].

For project information, visit the Kuberlane GitHub organization. Please do not share SSH credentials, private keys, access tokens or server details in public.