Privacy notice

Updated: 2 November 2026.

Controller and contact

APDSoftware di Carlo Zuffetti, a sole proprietorship, Via C. Colombo 15, 24047 Treviglio (BG), Italy, Italian VAT no. 03835250162, REA BG 431224, is the controller for the processing described here. Contact: privacy@shelleasy.app; include “Privacy ShellEasy” in the subject.

Website and preferences

Cloudflare hosts, delivers and protects the website. Requests involve processing IP addresses, dates and times, requested resources, and technical browser and infrastructure data. For activities under APDSoftware’s responsibility, the basis is our legitimate interest in operating the website securely and preventing abuse. Log retention: technical request and security-event data for the period needed to deliver pages and prevent and manage abuse, according to the service functions used; incident evidence is retained separately for as long as needed for handling or protecting rights. The actual retention period of the website’s Cloudflare logs has not been verified; information may be requested from the controller.

We do not use traffic analytics, profiling or behavioural advertising tools. When you choose a language or theme, your browser stores se.lang and se.theme to remember your choice until you change it or clear the website data. These preferences are not used to track you across websites. On your first visit, your browser language may determine the version displayed. In the configuration described, we do not use cookies or tracking tools for statistics or advertising.

Communications and support

We process your email address and the information you send to respond. The basis is taking pre-contractual steps at your request where relevant; otherwise, our legitimate interest in handling correspondence and support. Retention: up to 12 months after the last exchange. Legal obligations or disputes may require separate retention of relevant evidence only, for as long as necessary. Do not send passwords, private keys or unnecessary third-party data.

App and AI assistant

In the version described, the app runs on your device without an APDSoftware account, telemetry or automatic error reports sent to APDSoftware. Through its ordinary functions, we do not receive vault data or terminal contents. The vault database is encrypted on the device; downloaded files, clipboard contents and shell history are outside that protection.

Connections and transfers use systems selected by you. The AI assistant, initially disabled, sends the text you confirm directly to the configured model server. A remote server receives that text outside your device. APDSoftware does not receive it through this function. The server operator and any services it uses apply their own terms and privacy notices. The filter cannot recognise every secret or item of personal data: read the preview.

On macOS, biometric unlocking uses the operating system: the app does not capture or store your fingerprint image. Any data separately sent to APDSoftware for support or reporting is processed under this notice.

Recipients and transfers

Authorised people and providers needed for hosting, networking and email may access the data according to their respective roles. Authorities may receive it where required by law. We do not sell data or disclose it for other parties’ promotional activities.

Cloudflare operates a global network and processes technical request data. Mailronix documents identify Hetzner Online GmbH for hosting and backups in Germany and AWS SES in the Frankfurt region. Hetzner’s standard DPA states that choosing an EU server location keeps the relevant processing and support in the EU; this is not a guarantee for the entire email chain. SES Terms §15.3 allow AWS or its providers to store and scan email for security and abuse prevention. AWS DPA §12 and Cloudflare DPA §6 address transfer safeguards in their respective circumstances. Standard terms alone do not prove the account’s applicable contract: the AWS entity, acceptance and actual configuration require verification. No active DPF certification is attested. You may request information and copies of relevant safeguards, with necessary redactions, at privacy@shelleasy.app.

Release notification — applicable when the form is active

With your consent, we process your email address, language, and minimum evidence of the request, confirmation and withdrawal to send you one notification of the first public version. Signing up is optional, requires confirmation and does not subscribe you to a newsletter. You may withdraw through the link in the emails or by contacting us, without affecting previous lawful processing.

We use Mailronix, operated by the same APDSoftware business, with Hetzner hosting in the EU and delivery through AWS SES, as well as Cloudflare for the website and request transit. These providers process the data needed for their respective functions; the safeguards above apply.

The confirmation link is valid for 24 hours. When the form is activated, unconfirmed requests will be deleted from active systems within 30 days of the request, with checks at least weekly: activation will follow release and verification of this Mailronix function. APDSoftware applies its own procedure for the 12-month limit after confirmation, with monthly checks and deadline management to avoid exceeding that limit, and deletion of the operational list within 30 days of the notification. Withdrawal immediately prevents the release notification, without waiting for contact deletion. If the project is abandoned, the list is not kept pending a future release.

The confirmation date and source are associated with the contact for the ShellEasy brand and follow that contact’s retention; there is no separate archive of consent evidence for 24 months after its deletion. Withdrawal leaves a minimum do-not-send record — brand, address and unsubscribe date — which survives contact deletion. It has no preset expiry: it is retained for as long as needed to honour withdrawal and prevent unsolicited reimporting and reactivation, without promotional reuse. Mailronix’s policy provides for 24 months from the event for extended evidence of withdrawal, including channel, outcome and technical context. The actual technical retention period and execution of deletion have not yet been verified for this flow. These data are used only as necessary to respect the choice, document non-sending and protect rights on the basis of legitimate interests; data-subject rights remain applicable. We do not attribute automatic periodic review of these records to the service. On final cessation of the relevant processing, documented deletion rules apply; further retention requires a separate justified need.

Unsubscribing differs from technical blocking for permanent bounces or complaints: Mailronix and AWS SES also operate suppression lists for security and delivery. The SES list is account-wide within the region and, under Mailronix’s documented configuration, may prevent sending by multiple senders. Delivery isolation between projects is not promised.

Mailronix may retain transactional message bodies for up to 24 months; bodies in the password-reset and security-alert categories containing single-use tokens are excluded. These periods describe Mailronix records, not a universal deletion deadline at all providers.

Technical delivery logs are ordinarily kept for 24–25 months after sending, according to the monthly partition cycle. Audit logs are identifiable for 12 months, then effectively anonymised and kept for another 12 months. Backups may contain each deleted item for up to another 36 days after its deletion from active systems, without ordinary use and with deletions reapplied before reuse after restoration. Removal from the list does not immediately delete every log or copy.

Rights and provision of data

Where applicable, you may request access, rectification, erasure, restriction and portability, withdraw consent and object to processing based on legitimate interests. Write to privacy@shelleasy.app. We normally respond within one month; permitted extensions are explained and notified. You may complain to the Italian Data Protection Authority or the competent authority and seek a judicial remedy.

Essential technical data is needed for browsing. Providing contact details is optional, but we cannot respond without a contact address; without an email address and consent we cannot send the notification. In the processing described, we do not carry out commercial profiling or solely automated decisions with legal or similarly significant effects. We update this notice when processing changes and bring material changes to your attention.