Legal

Privacy Policy

Effective 2 October 2026. Applies to atlasnetworks.tech and the Atlas Terminal desktop app.

1. Who we are

Atlas Terminal is operated by Atlas Terminal ("we", "us"). We are responsible for the personal information described in this policy. We handle it in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, for people in the European Economic Area and the United Kingdom, as a controller under the GDPR and UK GDPR.

Questions or requests: privacy@atlasnetworks.tech.

2. Information we collect

Information you give us

• Account: your name, email address, and password. Passwords are stored only as a salted scrypt hash; we never see or store the password itself.
• Google sign-in (if you choose it): your name, email address, whether Google has verified it, and your Google account identifier. We do not receive your Google password, contacts, or files.
• Beta waitlist: your name, work email, the kind of work you do, your platform, plan interest, an optional note about what you want to test, and your consent to beta emails.
• Support: anything you send us when you contact us, and notes our team keeps to help you.

Payments

Payments are handled by Polar, which acts as the merchant of record and processes your payment details under its own privacy policy. We receive your name, email, the product, order and subscription status, amounts, and invoice details. We never receive or store full card numbers.

Licenses and devices

When you license a device, the app creates an activation request containing:

• a machine fingerprint: a SHA-256 hash of your operating system's machine identifier. The raw identifier never leaves your device, and the hash cannot be reversed to reveal it;
• the device name, platform, processor architecture, and app version;
• a random request identifier and the time it was created.

We use these to bind the license to that device, count devices against your plan, and let you see and release devices from your account. The signed license file includes your name and email so you can tell whose license it is; we keep a copy so you can download it again.

Information collected automatically on the website

• Request logs: your IP address; an approximate location (country, region, city) and network operator derived from it using a database stored on our own server; your browser, operating system, and device type, read from your browser's user agent; the page requested (never the query string, which can contain private links); the domain of the page that referred you; the response status and time; and your account, if you are signed in.
• Security events: each sign-in, registration, waitlist, password reset or change, email verification, and sign-out attempt, with its outcome, the reason it was refused, the email address entered, and the same IP, location, and browser details. Requests blocked by our cross-site protection are recorded too.

We use these to detect and stop brute-force and credential-stuffing attacks, investigate suspicious sign-ins (for example, a sign-in from a new country), troubleshoot, and understand in aggregate how the site is used. We do not use them for advertising or to build marketing profiles.

Cookies and local storage

We use only cookies that are strictly necessary and preferences you choose. See the Cookie Policy.

3. The Atlas Terminal desktop app

What stays on your device

Connection profiles, hostnames, usernames, passwords, SSH keys, scripts, settings, session logs, terminal output, and AI conversation history are stored locally in the app's data folder on your device. Saved credentials are kept in the app's encrypted vault, protected by your operating system's credential store where one is available. None of this is sent to us.

Connections you open (SSH, SFTP, SCP, Telnet, serial, remote desktop, port forwarding, and EVE-NG labs) go directly from your device to the servers you choose. They are not routed through our infrastructure.

What the app sends, and to whom

AI assistant

AI features are optional and work only after you connect a provider. You choose the provider (such as OpenAI, Anthropic, Google Gemini, OpenRouter, or GitHub Copilot, using your own key or account) or a model that runs on your own computer through Ollama. Requests go directly from your device to that provider and are handled under the provider's terms and privacy policy. We do not receive, see, or store them. Your API keys are stored on your device.

Terminal output can contain device configurations, internal addresses, or secrets. Review what you share, and consider a local model for sensitive environments.

Cloud sync and backup

Sync is optional. Your data is encrypted on your device (AES-256-GCM, with keys derived using Argon2) before it is uploaded to your own Dropbox or Google Drive, so the storage provider receives only encrypted data. We do not host your backups.

No analytics or tracking

The app does not include advertising, usage analytics, or automatic crash reporting. It reads your clipboard and files only when you use a feature that needs them, such as pasting or transferring a file.

4. How we use information, and our legal bases

For the GDPR and UK GDPR, we rely on these legal bases:

We do not sell or rent personal information, use it for advertising, or share it for cross-context behavioral advertising. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Automated security rules may temporarily rate-limit sign-in attempts; contact us if this affects you.

5. Who we share it with

We share personal information only with service providers that help us run Atlas Terminal, under agreements that limit their use of it:

• our cloud hosting provider, which runs our servers;
• Supabase, which hosts our database;
• our email delivery provider, which sends account and beta emails;
• Polar, for payments, as merchant of record;
• Google, if you choose to sign in with Google;
• CrabNebula and GitHub, which distribute the app and its updates.

AI providers, Dropbox, Google Drive, and the servers you connect to receive data only because you choose to use them; your use of those services is governed by their own terms and privacy policies.

We may also disclose information when the law requires it, to protect the rights, property, or safety of our users, the public, or us, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply to it.

6. Overseas storage and transfers

Our service providers may store or process personal information outside Australia, including in the United States and the European Union. We take reasonable steps to ensure they protect it to a standard consistent with the Australian Privacy Principles. For transfers from the EEA or UK, we rely on adequacy decisions or standard contractual clauses.

7. How long we keep it

8. How we protect it

We encrypt traffic with TLS, store passwords as scrypt hashes and one-time links as hashes, keep sign-in cookies HTTP-only and secure, restrict database access to our own server, rate-limit sign-in and registration attempts, sign licenses cryptographically, and limit administrative access to people who need it, with an audit log of their changes. No system is perfectly secure. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires, and other regulators where the law requires.

9. Your choices and rights

• Access and correction: you can see and update your profile, devices, and sessions in your account, and ask us for a copy of the personal information we hold about you or to correct it.
• Deletion: you can ask us to delete your account and personal information.
• Beta emails: you can withdraw consent at any time by contacting us. Service emails, such as password resets, are part of the service.
• Sign-in sessions: you can sign out other sessions from your account's security page.
• Anonymity: you can browse the website without telling us who you are. Accounts, licenses, and payments need an email address.

If you are in the EEA or UK, you also have rights to restrict or object to processing, to data portability, and to lodge a complaint with your local data protection authority.

To make a request, email privacy@atlasnetworks.tech. We may need to verify your identity. We respond within 30 days, and do not charge for reasonable requests.

10. Children

Atlas Terminal is not directed at children. You must be at least 13 years old, or older if your country requires it, to use it, and if you are under 18 you need a parent's or guardian's permission. If we learn we hold personal information about a child under 13, we will delete it.

11. Changes to this policy

We will update the effective date when we change this policy. If a change is significant, we will tell you by email or with a notice on the site before it takes effect.

12. Contact and complaints

Contact privacy@atlasnetworks.tech with any question or complaint about privacy. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992, or, in the EEA or UK, to your local data protection authority.