Privacy Policy

Shellspace by Buzzbox Media

Effective Date: February 27, 2026

Shellspace is a native macOS and iOS app that lets you manage Claude Code sessions remotely. This privacy policy explains what information we collect, how we use it, and how we protect it.

Information We Collect

When you use Shellspace, we collect the following information:

• Account Information: Your email address and hashed password for authentication
• Device Information: Device name and platform (macOS or iOS)
• Session Data: Terminal content from your Claude Code sessions, relayed through our server in real-time
• Authentication Tokens: JWT tokens and refresh tokens for session management

How We Use It

We use this information solely to provide Shellspace functionality:

• Authenticate you and manage your account
• Relay terminal content between your devices in real-time
• Maintain your session connections across macOS and iOS
• Support your remote Claude Code session management

Data Storage

Terminal Content: Session data is buffered in memory on our server during active sessions, with a maximum buffer of 128KB. This allows reconnection without losing recent context. Once your session ends or the buffer is exceeded, this data is immediately discarded and not retained.

Server Location: All data is stored on a DigitalOcean server in the United States. Your account information and authentication tokens are encrypted at rest.

Passwords: Passwords are hashed using industry-standard cryptographic functions. We never store or have access to your plaintext password.

Data Retention

We retain only the minimum information necessary to operate Shellspace:

• Your account credentials and device information are kept as long as your account exists
• Session data is held in memory only while you are actively connected
• Refresh tokens are stored server-side to maintain your authenticated sessions

Your Rights

You have complete control over your data:

• Delete Your Account: You can delete your account and all associated data at any time directly from the Shellspace app
• Data Portability: Contact us for information about your stored data
• No Forced Retention: We do not retain your data after account deletion

Security

We implement standard security practices to protect your information, including encryption in transit and at rest, secure authentication with JWT tokens, and limited server-side token storage. However, no system is completely secure, and we encourage you to use strong passwords and protect your device access.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of Shellspace after changes constitutes your acceptance of the updated policy.