← Back to Spaceship CLI

Privacy Policy & Data Security

Last updated: September 24, 2026. This Privacy Policy details the data handling, storage practices, and network communications of the Spaceship CLI executable and documentation website.

1. Zero Telemetry & Local Execution

The Spaceship CLI binary contains zero tracking code, zero analytics SDKs, and zero telemetry beacons. We believe that developer terminal workflows and infrastructure management must remain completely private. The application does not collect usage metrics, IP addresses, execution timestamps, or error reports back to any SpaceCorps server. The only network requests made by the tool are outbound HTTPS requests made directly to the official Spaceship public API endpoint (https://spaceship.dev/api/v1/) to fulfill user-initiated operations.

2. Cryptographic Credential Protection

Authentication credentials (API Key and API Secret) are sensitive secrets. Spaceship CLI strictly refuses to save secret tokens in plain-text configuration files by default. Instead, credentials are delegated directly to the secure credential vault provided by the host operating system: macOS Keychain Services via the native security subsystem, Windows Data Protection API (DPAPI) encrypted under user-specific credentials, or the freedesktop.org Secret Service daemon via secret-tool on Linux. Plaintext file fallback is disabled unless explicitly permitted by the user via the SPACESHIP_ALLOW_PLAINTEXT_STORE=1 environment variable.

3. Local Configuration Metadata

Non-sensitive configuration metadata—specifically account alias names and default account selection—is stored locally in an owner-restricted YAML file (chmod 0600 on POSIX platforms) located within your standard system configuration directory (~/Library/Application Support/spaceship-cli on macOS, ~/.config/spaceship-cli on Linux, or %APPDATA%\spaceship-cli on Windows). This file can be inspected, backed up, or deleted at any time.

4. Website Privacy

This documentation website is hosted as a static site on GitHub Pages. It contains no tracking scripts, no third-party cookies, and no personal data collection mechanisms. Standard web server access logs are handled directly by GitHub in accordance with GitHub's standard Privacy Statement.