Privacy Policy
Last updated: October 15, 2026
Who is responsible
xujian operates xtty and this website. For privacy inquiries and applicable access, correction or deletion requests, contact support@xtty.sh.
The application
The terminal and SSH client run on your Mac. Settings, host profiles and local logs are stored locally. Credentials you choose to save are stored in macOS Keychain. SSH connections and file transfers communicate with the hosts you choose. Programs run inside terminal sessions can make their own network connections. Opening our download or discussion pages sends a request to the website.
Website and providers
Cloudflare hosts the website and processes requests and security data such as IP addresses and request metadata. The homepage loads fonts from Google Fonts, which receives browser requests. A language preference is stored in browser localStorage. Provider practices are described in Cloudflare’s and Google’s privacy policies.
Public community
Posts, replies, nicknames and attached screenshots in the discussion community are publicly visible. Cloudflare Turnstile is used to protect posting, and a time-bucketed IP hash is used for rate limiting. Do not post passwords, keys, personal data or purchase information. Contact us to request moderation or removal.
Support, payments and activation
If you contact support, we use the information you provide to handle that request. For xtty Pro purchases, Waffo.com Limited processes payment and billing information as merchant of record under Waffo’s privacy policy. Our licensing service is designed to process order identifiers, purchase status and hashed device identifiers for activation and fraud prevention; we do not need SSH passwords or terminal contents for licensing.
Purpose, retention and rights
We use data to operate the site, respond to requests, secure services and fulfill purchases. Where GDPR applies, these purposes rely on performance of a contract or steps requested before a contract, legal obligations, legitimate interests in service security and operation, or consent where required. You may object to processing based on legitimate interests or withdraw consent where processing relies on consent. We retain public posts until removed and operational records only as needed for their purpose and applicable obligations. Providers set their own retention rules. Applicable rights may include access, correction, deletion, restriction, objection, portability and complaints to a supervisory authority. Cross-border processing may occur through our providers. Contact support@xtty.sh for details or requests.