gesher / privacy policy

Privacy Policy

Last updated November 14, 2026

Who we are

Gesher is a terminal and SSH client made by CTF Designs, LLC (“we”, “us”), based in Murrieta, California. This policy covers the Gesher app and the gesher.dev website. Gesher is in development, and this policy describes how it is built to handle data. If that changes, we’ll update this page before the change ships.

What we collect

Nothing from the app. People and roles in Gesher live in your own database, not with us. Gesher has no account with us, no sign-in to us and no server of ours that it talks to. The app contains no analytics, no telemetry, no crash reporting, no advertising and no tracking. It does not send us your commands, terminal output, files, server details, credentials, AI conversations or how you use it.

We do not sell or share personal information, and we have none from the app to sell or share.

Where your data is kept

Gesher keeps its data in a PostgreSQL database that you or your organization run, and on the computer where the app is installed. We never receive a copy. Saved passwords are encrypted with your key before they are stored, so the database never holds them in clear.

Whoever runs the PostgreSQL database controls it. If your employer or another administrator runs it, they can see and manage what Gesher stores there under their own rules, including the audit log of who did what in Gesher. Roles, permissions and access lists decide what each person can see and do in the app. Questions about a database you don’t run go to the person or organization that runs it.

Keep that database and the computers you use Gesher on secure, backed up and up to date. Anyone who can read the database or your computer’s storage may be able to read what Gesher keeps there.

Your servers

When you connect to a server, Gesher talks to it directly over SSH from your computer. Your commands, their output and any files you move go between your computer and that server only. If you choose a direct host to host transfer, the source server signs in to the other server by itself and the files go straight between the two. The servers’ owners may log your activity under their own policies.

AI features

AI features are optional and stay off until you connect an AI provider. You can use a subscription you already have (such as Claude or ChatGPT), an API key from a provider you choose, or a model you run yourself.

• Requests go straight to the provider. Gesher sends AI requests directly from the app to the provider you connect, using your own key or account. They never pass through us, and we can’t see them.
• What a request can contain. Whatever you type in the search bar or prompt, and the context the feature needs to help, such as the command you’re writing and the kind of server you’re on.
• Session output only if you allow it. The AI sees what a session prints only on clients where you turn on “Let the AI see this session’s output”. It is off unless you turn it on, client by client. Output can contain secrets, such as passwords, tokens or customer data, so leave it off where that data must not leave your servers.
• The provider’s policy applies. The provider you pick receives, stores and uses your requests under its own terms and privacy policy, not ours. Check them, especially if you work with data that belongs to someone else.
• Sign-ins and keys stay with you. The API keys and subscription sign-ins you add on the Models page are stored with your other Gesher data, on your computer or in your own database.
• Local autocomplete uses no AI. The first level of autocomplete runs on your computer and sends nothing anywhere.

This website

gesher.dev sets no cookies and uses no analytics, ads, tracking pixels, third-party scripts or third-party fonts. Like any website, the company that hosts it may keep standard server logs (such as IP address, browser type and the page requested) for a short time to run and protect the service. We don’t use those logs to track or profile anyone.

Downloads and updates

When downloads open, you’ll get Gesher from this website or from a store we name here. The site or store that serves the file sees the request, the way any download works. If a later version of Gesher checks for updates or sends crash reports, that will be described here first, and anything beyond a basic update check will be off unless you turn it on.

If you email us

If you write to us, we get your email address and whatever you put in your message. We use it only to answer you and delete it when we no longer need it. Please never send us passwords, private keys, API keys or server details. We don’t need them to help.

Children

Gesher is a tool for adults who manage computers and servers. It is not directed to children, and we don’t knowingly collect information from anyone, including children under 13.

Your privacy rights

Depending on where you live, laws such as the California Consumer Privacy Act or the EU and UK GDPR give you rights to know, access, correct, delete or move your personal data, and to opt out of its sale or sharing. Because the app sends us nothing, we hold no personal data from it. Your data is in your own database and on your own computer, where you or your administrator can view or delete it. If you have emailed us and want that correspondence deleted, write to privacy@gesher.dev and we will. We will not treat you differently for using these rights.

Security

Gesher connects to servers over SSH, which encrypts the connection. No software is perfectly secure, so keep the app, your operating system and your database up to date, use strong keys, and limit who can reach your PostgreSQL server.

Changes to this policy

If we change how Gesher handles data, we’ll update this page and its date before the change ships, and say so in the app if the change matters. We will not start collecting data from the app without saying so clearly beforehand.

Contact

CTF Designs, LLC
Murrieta, California, United States
Email: privacy@gesher.dev