Last updated: September 24, 2026. This Privacy Policy details the data handling, storage practices, and network communications of Storage CLI.
Storage CLI contains zero tracking code, zero analytics SDKs, and zero telemetry beacons. The tool does not collect usage metrics, IP addresses, or error reports back to SpaceCorps. Network requests are made strictly and exclusively to Azure Blob Storage endpoints (or custom user-specified endpoints) to execute user-directed upload and SAS generation tasks.
Storage account keys and SAS tokens are held in native OS keystores: macOS Keychain Services via the native security subsystem, Windows Data Protection API (DPAPI) encrypted under user-specific credentials, or the freedesktop.org Secret Service daemon via libsecret on Linux. Plaintext file storage is only permitted with explicit user opt-in (STORAGE_ALLOW_PLAINTEXT_STORE=1).
Non-sensitive configuration metadata (profile names, account names, and default container names) is stored locally in an owner-restricted YAML file (chmod 0600 on Unix systems) located in standard system configuration paths (~/Library/Application Support/storage-cli on macOS, ~/.config/storage-cli on Linux, %APPDATA%\storage-cli on Windows).