Privacy
Privacy
What K2Shell stores, what it cannot read, and who it shares data with. This applies to the hosted service at k2shell.com; on a self-hosted install, its operator is responsible for the data.
What is stored
Your email, a hash of your password, your vault as ciphertext, server names and addresses, your settings, an activity log of commands and account events with IP address and browser, metrics, and, if you turn them on, encrypted recordings and backups.
What cannot be read
Vault contents (hosts, passwords, keys, snippets and history) are encrypted in your browser with a key from your master password. The server cannot decrypt them. Command output kept for audit is sealed to a key held in your vault.
Who it is shared with
PayPal processes payments; we receive your subscription status, not your card details. If you sign in with GitHub, Google or Apple, they confirm your email to us. Alerts and backups go only where you send them: your email, Telegram, webhooks or S3 bucket. There are no analytics, ads or third-party scripts.
Retention
Activity is kept for the number of days set in Settings, metrics for 90 days, recordings for the days you choose. Deleting your account removes its data.
Your choices
You can export your hosts, sign out other devices, delete vault items, and delete your account from Settings, which also cancels your subscription. Questions: support@k2shell.com.