Privacy Policy

Last updated: July 19, 2026

Hetznerly (“the app”) is a client for managing your own Hetzner infrastructure from iPhone, iPad and Mac. This policy explains what the app does and does not do with data.

Data we do not collect

Hetznerly does not collect, store, or transmit any data about you to us. Its App Store privacy label is “Data Not Collected”. Specifically:

• There are no Hetznerly accounts and no sign-in with us.
• There is no analytics, telemetry, crash-reporting or advertising SDK.
• There is no tracking, and nothing is shared with third parties.
• There are no in-app purchases or subscriptions.

Your Hetzner credentials

To manage your infrastructure you supply your own Hetzner credentials — Cloud API tokens, DNS API tokens, Robot webservice username/password, and Object Storage (S3) keys. These are stored in the device Keychain, the operating system's encrypted credential store, and by default they stay on that device only.

• An optional iCloud Keychain sync setting (off by default) lets you sync credentials to your other devices through Apple's iCloud Keychain. Hetznerly never sees them either way.
• SSH keys are generated on the device; they are stored in the Keychain, with P-256 keys held in the Secure Enclave.
• You can additionally protect the app with Face ID / Touch ID.

Network requests

The app talks directly to Hetzner and to servers you choose — never to a Hetznerly server (there is none):

• api.hetzner.cloud — Hetzner Cloud API
• dns.hetzner.com — Hetzner DNS API
• robot-ws.your-server.de — Hetzner Robot API (dedicated servers, Storage Boxes)
• <region>.your-objectstorage.com — Hetzner Object Storage (S3)
• status.hetzner.com — Hetzner's public status feed (no token is sent)
• Your own servers — when you open an SSH terminal or SFTP session

API requests carry your token so Hetzner can authenticate you. Hetzner's own privacy policy applies to their services.

Data stored on your device

• Display preferences (appearance, tint, and similar), stored in the system's standard preference storage.
• A small snapshot of server names, statuses and IPs for your home-screen widgets, stored in the app group (group.me.pai.hetznerly) shared with the widget — the widget itself makes no network requests and never sees your tokens.
• An SSH known_hosts record, stored with file protection.
• An optional on-device Spotlight index of your servers and zones.

All of this is removed when you delete the app.

Children

Hetznerly is a server-administration tool and is not directed at children. It collects nothing from anyone, of any age.

Changes

If this policy changes, the “last updated” date above will change with it.

Contact

Questions about this policy: [email protected] or open an issue at github.com/baixianger/hetznerly.