Privacy

Privacy Policy

Last updated: June 2026

The short version: the ShipBoard app has no servers and collects nothing — no telemetry, no tracking, no accounts. Your AWS credentials and provider tokens stay on your Mac and are only ever sent to the providers you connect. This website uses Google Analytics to measure visits (see "Website analytics" below).

ShipBoard ("the app") is a macOS menu-bar application that displays the status of your CI/CD pipelines. This policy explains what the app does — and doesn't do — with your information.

The app

The ShipBoard app collects nothing. It has no backend service and no telemetry — no analytics, usage data, crash reports, device identifiers, or personal information of any kind, and there are no user accounts.

Your credentials and tokens

AWS: the app reads your local AWS configuration in ~/.aws (read-only) to list profiles and call AWS CodePipeline. Credentials are never copied off your machine.
GitHub, GitLab, Vercel, Netlify: the access tokens you enter are stored in the macOS Keychain and are only used to authenticate directly with that provider's API.

These secrets remain on your Mac. They are transmitted only to the corresponding provider, over HTTPS, to fetch your pipeline status.

Network connections

ShipBoard makes network requests only to:

the CI/CD providers you configure (AWS, GitHub, GitLab, Vercel, Netlify), to read pipeline and deployment status; and
the ShipBoard update feed, to check whether a new version is available (a standard request for an update manifest — no personal data is sent).

It does not connect to any other service, and there is no ShipBoard-operated server that receives your data.

Notifications

Pipeline notifications are generated and shown locally by macOS. No notification content leaves your device.

Website analytics

This website — the page you're reading — uses Google Analytics to understand aggregate traffic, such as how many people visit and which pages they view. Google may set cookies and process data like your approximate location, device, and browser, as described in Google's own privacy policy. This is standard website analytics and is entirely separate from the app, which contains no analytics or telemetry. You can opt out through your browser's privacy settings or Google's opt-out tools.

Third parties

We never sell or rent your data. The app shares nothing; the only third party involved is Google Analytics on this website, as described above. Your interactions with AWS, GitHub, GitLab, Vercel, and Netlify are governed by those companies' own privacy policies.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new date.

Contact

Questions or concerns? Open an issue on GitHub.