We collect nothing.

Effective date: May 17, 2026 · Applies to: BSH SDI Agent (macOS app) and the BSH shell

Neither the BSH SDI Agent app nor the BSH shell collects, stores, transmits, or reports any personal data, usage data, telemetry, diagnostics, or analytics — ever.

No account is required. No network connection is made by the app or shell. Nothing leaves your device.

BSH SDI Agent — macOS App

The BSH SDI Agent is a local menu-bar daemon that listens on a user-owned Unix domain socket and decrypts structured payloads sent by BSH via the OSC 7777 protocol. It operates entirely on-device:

No network connections are made by the agent.
No data is written to disk beyond what you explicitly direct it to do (e.g. filling a form field you have open).
Decrypted payloads are held in memory only for their declared ttl and then purged.
Session keys are ephemeral — derived in memory per shell session and never written to disk.
No crash reports, analytics, or usage metrics are collected or transmitted.
The app does not request access to contacts, location, camera, microphone, or any other sensitive system resource beyond the terminal socket it serves.

BSH (BrightShell)

BSH is an open-source shell distributed as source code and compiled locally on your machine. It inherits the privacy characteristics of the upstream zsh shell:

No telemetry, analytics, or update-check pings are built into the shell.
No data about your commands, environment, or system is transmitted anywhere.
History files, if enabled, are stored locally on your machine under your control.
The SDI module (bsh/sdi) communicates only with the local BSH SDI Agent over a local Unix socket — no traffic leaves the machine.

This Website

The BSH project website (bsh.digitaldefiance.org) uses Google Analytics (tag G-9B44JCDZN5) to collect aggregate, anonymised page-view statistics (pages visited, approximate region, browser type). This data is governed by Google's Privacy Policy. No personally identifiable information is collected by the website itself. Website analytics are entirely separate from the BSH shell and the BSH SDI Agent — neither of those products has any connection to this website or its analytics.

Third-Party Services

The BSH SDI Agent and BSH shell do not integrate with any third-party analytics, crash-reporting, advertising, or data-collection services. There are no in-app purchases, subscriptions, or accounts.

Children's Privacy

Because no data is collected at all, BSH and the BSH SDI Agent are safe for users of any age under applicable data-protection laws including COPPA and GDPR.

Changes to This Policy

If this policy ever changes, the updated version will be posted at this URL with a new effective date. Given that our policy is "collect nothing", we do not anticipate substantive changes.

Contact

Questions about privacy can be directed to the project via GitHub Issues or the BSH SDI Agent repository.