Privacy Policy

Summary

Yaw does not collect, transmit, or store any user data on our servers. There is no telemetry, no analytics, no tracking, and no account system. Everything stays on your machine.

What Yaw Does Not Collect

• No usage analytics or telemetry
• No crash reports sent to us
• No command history or terminal output
• No IP addresses, device identifiers, or fingerprinting
• No personal information (name, email, location)
• No tracking cookies or third-party scripts in the application

Yaw does not phone home. The application does not contact Yaw Labs servers during normal use.

Data Stored Locally

Yaw stores the following data on your local machine only:

• Connection credentials — SSH, database, and other connection details are encrypted using AES-256-GCM and stored locally. Encryption keys are derived from your OS user profile (DPAPI on Windows, Keychain on macOS, secret service API on Linux).
• AI API keys — Encrypted with AES-256-GCM and stored locally. Keys are never sent anywhere except directly to the provider's own API endpoint.
• Application settings — Your preferences, saved commands, and window layout.
• Paste history — Clipboard entries pasted into Yaw, stored locally.

None of this data is transmitted to Yaw Labs or any third party.

AI Features

When you use Yaw's built-in AI assistant, API requests travel directly from your machine to the AI provider you choose (Anthropic, OpenAI, Google, xAI, Mistral, Amazon Bedrock, OpenRouter, HuggingFace, or Ollama). Yaw does not proxy, intercept, log, or inspect these requests. We have no infrastructure that handles your AI traffic.

If you use Ollama, all AI processing happens locally on your machine with zero network traffic.

License Activation

If you purchase a license, Yaw contacts Lemonsqueezy (our payment processor) to validate your license key. This is the only network request Yaw makes to an external service. The information exchanged is limited to your license key and activation status. After activation, individual licenses do not require further network contact.

Lemonsqueezy processes payments and stores your purchase information (name, email, payment details) as the merchant of record. Their privacy policy governs that data: lemonsqueezy.com/privacy.

Update Checks

Yaw checks for application updates by contacting yaw.sh. This request contains only your current version number and platform. No personal data or usage information is included.

Website

The yaw.sh website is a static site hosted on Netlify. We do not use analytics, tracking scripts, or cookies on the website. Netlify may collect standard server logs (IP address, request URL, timestamp) as part of their hosting service. Their privacy policy governs that data: netlify.com/privacy.

Children's Privacy

Yaw does not knowingly collect any personal information from anyone, including children under 13.

Changes to This Policy

If we make changes to this privacy policy, we will update the "Last updated" date at the top of this page. Since Yaw does not collect email addresses or maintain user accounts, we cannot notify users directly — please check this page periodically.

Contact

Questions about this privacy policy can be sent to contact@yaw.sh.