privacy

What this site and this app know about you.

Last updated 21 August 2026

Short version: the site knows almost nothing, and the app is built so that it cannot know anything. The longer version is below, and it is written to be checked rather than to reassure.

This website

There are no accounts, no forms and no cookies. One thing is stored in your browser, under vortex-theme, and it holds the word “dark” or the word “light” because you pressed the theme button. It is read by this page and sent nowhere. Clearing your site data removes it.

Three typefaces load from Google’s font servers, fonts.googleapis.com and fonts.gstatic.com. That means Google receives your IP address and your browser’s user agent when the page opens, in the same way it would for any site using them. Nothing else on the page contacts a third party, and there is no analytics, no tag manager and no advertising pixel on it today.

The page is served by Amazon Web Services, who keep ordinary server logs: the request, the time, the IP it came from. That is the host’s doing rather than ours, and we do not build anything on top of it.

If you buy a copy

Payment is taken by Stripe, who handle the card details: they never reach us and we could not hold them if we wanted to. What Stripe does with them is covered by their privacy notice. What reaches BlazeOps Enterprise is what is needed to sell you something and to be able to prove we did: an email address, the amount, the date, and whatever the processor’s receipt contains. We use it to deliver the download, to answer you if you write, and to keep the tax records we are required to keep.

No marketing list, and no mail you did not ask for. If a new version is worth telling you about, that is a thing you would have to opt into.

The app itself

Vortex has no account, no licence server and no telemetry. It makes exactly the network connections you ask it to make, to the hosts you typed in, and it makes them directly. There is no check-in on launch, no update ping, and no crash reporting.

Everything it remembers stays on your machine: the host list, your settings, and any key it creates for you, in your own ~/.ssh. Passwords you choose to store go to your operating system’s credential store, and the limits of that are described on the front page, in the section about the parts that have to be right. None of it is synced anywhere by us, because there is no “anywhere”.

Asking us about your data

Write to developer@vortexssh.com and ask what we hold, ask for a copy, or ask us to delete it. Purchase records we are obliged to keep for tax are the one thing we cannot delete on request, and we will say so plainly rather than ignore the request.

BlazeOps Enterprise operates from Malaysia, so what we hold falls under Malaysian data protection law, the Personal Data Protection Act 2010. If you are somewhere with stronger rights than that, ask anyway: the answer to all three questions above is the same wherever you are writing from.