Privacy Policy
Last updated: October 5, 2026
This policy explains what data PejavaCommander (the app) and pejava.com (the website and its server) collect, why, and what you can do about it. It is written to be read: if something is unclear, write to us.
Who we are. PejavaCommander is made by Roman Khomyakov (“we”, “us”). Contact: privacy@pejava.com.
The short version
- The app works fully without an account. Your files, folders, file names, terminal contents and passwords never leave your computer.
- If you sign in, we keep your name, e-mail and avatar from GitHub or Google and the settings you choose to sync.
- The app sends one anonymous usage ping a day. You can turn it off: Settings → General →
telemetry.enabled. - We do not sell data, do not show third-party ads based on your data and do not use tracking cookies.
1. Without an account
Usage statistics. Once a day the app sends us a random installation ID (created on the first launch, not linked to you or your account), the app version, operating system, processor type and system language. From the connection we take the country; the IP address is not stored. We use this to count installations and active users and to decide which systems and languages to support. Turn it off in Settings → General (telemetry.enabled).
Update check. Once a week the app asks pejava.com whether a newer version exists (Settings → General, update.checkWeekly). The request carries the app version and language and nothing else.
Messages in the free version. The free version downloads the donation and news pages from pejava.com in your system language. The request carries only the language.
Downloads. When you download the app from pejava.com we count the download by day, version, platform and country. The IP address is not stored.
The website. pejava.com uses no cookies and no third-party trackers. If we enable Cloudflare Web Analytics, it counts page views without cookies and without storing IP addresses.
2. With an account
You can sign in with GitHub or Google (Settings → Account). Then we store:
| Data | Why |
|---|---|
| Name, e-mail and avatar URL from GitHub or Google, and your user ID at that provider | To show who is signed in and to recognize you on another computer |
| For each signed-in installation: computer name, operating system, sign-in time and last activity | To manage sessions; a session can be ended with “Sign out” |
| The synced snapshot: list of installed plugins and where they were installed from, disabled plugins, settings, keyboard shortcuts and color palettes | To restore them on another computer or after reinstalling |
| Packages of plugins you installed from a folder or a .zip file | They have no download address, so we keep a copy to reinstall them |
| Your plan (Free or Supporter) and when it changed | To turn off reminders and messages for Supporters |
Settings may contain text you typed, such as a shell path or a folder name. Saved network connections, passwords and private keys are not synced and never leave your computer. The sign-in token on your computer is encrypted with the system keychain.
We never receive your GitHub or Google password. From GitHub we ask only for your public profile and e-mail address; from Google only your name, e-mail and profile picture.
3. Donations and purchases
Donations go through GitHub Sponsors. GitHub processes the payment; we receive your GitHub username and user ID, the amount and whether it is one-time or monthly, and we never see your card. GitHub’s privacy statement applies to the payment.
Purchases (corporate licenses) will go through Polar (polar.sh), which acts as the seller (merchant of record) and handles payment and taxes. We will receive your e-mail, the product, the amount and the order number.
We keep payment records for as long as tax and accounting law requires, even if you delete your account; they are then no longer linked to it.
4. Who processes the data
| Service | What for | Where |
|---|---|---|
| Cloudflare | Website, server, database and file storage | Global network |
| GitHub | Sign-in with GitHub, donations (GitHub Sponsors), public issue tracker | USA |
| Sign-in with Google | USA | |
| Polar | Purchases (later) | USA / EU |
These companies process data on our behalf or as independent controllers under their own policies. Some of them are outside your country, including outside the EU; transfers rely on their standard contractual clauses.
5. Legal bases (GDPR)
- Contract — your account, sign-in and settings sync, because you asked for them.
- Legitimate interest — anonymous usage statistics, download counts and the update check, to keep the app working and to plan development. You can turn statistics and update checks off.
- Legal obligation — keeping payment records.
6. How long we keep data
- Account data and synced settings: until you delete the account.
- Sign-in sessions: until you sign out on that computer or delete the account.
- Usage statistics (installation ID and the days it was used): deleted 25 months after the installation was last seen.
- Download counts: totals per day, without personal data.
- Payment records: as long as the law requires (usually up to 10 years).
7. Your rights
You can see your data (Settings → Account), take it with you, correct it, and delete your account at any time: Settings → Account → Delete Account. This removes your profile, sign-in methods, sessions, synced settings and plugin packages from our server. Your settings stay on your computer.
For anything else — a copy of your data, a question, an objection — write to privacy@pejava.com. We answer within 30 days. You may also complain to the data protection authority of your country.
8. Children
PejavaCommander is not directed at children under 16. We do not knowingly collect their data.
9. Changes
We will publish changes on this page and update the date at the top. If a change matters for how we use your data, the app will tell you.