Privacy

Orc Terminal has no accounts and collects nothing about you. Your sessions run on your own computer; the app is a remote control for them.

What the app keeps, and where

All of this stays on your phone and is never sent anywhere:

• The key that identifies your phone to your computer — an Ed25519 key generated in the iOS Keychain or Android Keystore, marked device-only, so it is not carried in a backup and cannot be restored onto a different phone.
• The computers you have paired: their names, addresses and certificate fingerprints.
• Your settings — font size, theme, key bar order, and the name this device reports.

Deleting the app deletes all of it.

Your sessions and their output

Everything a session prints lives on your own computer, inside the Orchestrator service you installed there. The app displays that output; it does not store it, copy it, or send it anywhere else.

Camera

Used for one thing: scanning the pairing QR code your own computer shows. Nothing is recorded, saved or transmitted, and the camera is not used anywhere else in the app.

Notifications

Notifications are generated locally, on your phone, by the app itself. There is no push service — nothing about your sessions is sent to Apple, Google, or anyone else in order to notify you.

The relay

By default your phone reaches your computer through relay.markushaas.com, which I run. It exists so that you never have to forward a port or run a VPN.

It cannot read your traffic. The connection is encrypted end to end with your own computer's certificate, which the app pins; the relay copies bytes it holds no key to decrypt.

What it can see, and does log: which host identifiers are online, when connections start and end, and how many bytes pass through. A host identifier is a random 128-bit value derived from your computer's own key — it is not tied to a name, an email address or an account, because there are none. These logs sit on the server for at most 14 days and are then discarded. They are not shared with anyone, and they are not used for analytics or profiling.

You can avoid the relay entirely. Running orchestrator relay off on your computer turns it off, and the app keeps working over your local network or Tailscale.

What there is none of

No analytics, no crash reporting, no advertising identifiers, no third-party SDKs of any kind, and no account to create. Nothing is sold or shared with anyone, because nothing is gathered in the first place.

Children

Orc Terminal is a developer tool and is not directed at children.

Changes

If any of the above stops being true, this page changes and so does the date below.

Questions

Email me and I will answer.

Last updated 8 September 2026.