Tunnelyard Privacy Policy

Effective November 3, 2026 · Version 1.0

In short: Tunnelyard collects no data. It has no account, no analytics, no ads and no tracking. Your tunnels, keys and passwords stay on your Mac, and the app only connects to the SSH servers you configure.

Data we collect

None. Tunnelyard does not collect, upload, sell or share personal information or usage data, and the developer has no server that receives anything from the app. The App Store privacy label is Data Not Collected.

Network

Tunnelyard is an SSH client. It opens network connections only:

to the SSH servers (and jump hosts) you enter in your tunnels, to log in and carry the traffic you forward;
on your Mac, to listen on the local ports you choose for your tunnels (normally 127.0.0.1);
to the destinations your forwards point to, as you configured them.

That traffic goes between your Mac and your own servers, encrypted with SSH. Tunnelyard does not contact the developer, an update server, an analytics service or any other third party. It contains no third-party analytics, advertising or tracking SDKs, and it never changes your system network settings.

What stays on your Mac

Your tunnel list (names, hosts, ports, user names, options), saved in the app’s own container.
Private keys you import, and passwords or passphrases you choose to save, stored in your macOS Keychain. They are used only to log in to your servers and are never sent anywhere else.
Trusted server host keys (fingerprints you approved), saved in the app’s container.
Read-only access to your ~/.ssh folder, only if you grant it, kept as a security bookmark so the app can read your SSH config and key files next time. Tunnelyard never writes to ~/.ssh.
Settings (sounds, notifications, launch at login) and recent connection status, kept locally.

Deleting the app removes its container. Keys and passwords it saved in your Keychain can be removed in the app (Remove Key from Keychain / Forget) or in Keychain Access.

Permissions and why

Permission	When	Why
Outgoing network connections	When a tunnel connects	To reach your SSH servers.
Incoming network connections	While a tunnel is up	To listen on the local ports of your tunnels.
Files you choose (read-only)	Only if you grant `~/.ssh` access or import a key	To read your SSH config and the key files you pick.
Notifications	Only if you turn them on	To tell you when a tunnel connects or drops. Shown on your Mac only.

Children

Tunnelyard collects no data from anyone, including children.

Changes

If this policy changes, the new version will be published on this page with a new effective date.

Contact

Questions: jorgeealdunate@gmail.com · Developer: Jorge Aldunate · Support