Paper Holster Privacy Policy

This policy describes what the Paper Holster app does with data. It covers the app specifically — for the Paperweight Systems website, see our general privacy policy.

Paper Holster is an SSH client. It connects your device directly to a machine you already own and administer — a workstation, home server, VPS, mini PC, or Raspberry Pi — to reach a coding-agent session already running there.

What Holster doesn’t do

• No AI provider API is implemented or proxied by the app, and no Anthropic or OpenAI key is required or transmitted.
• No Paperweight Systems server sits in the data path for your terminal sessions.
• No analytics, no crash reporting, and no advertising trackers.
• No push notifications.

What’s stored on your device

Your saved machine list (address and the credential or key reference used to authenticate), the workspaces you define, and your app preferences are stored locally on your device, with credentials kept in platform-secure storage (such as Keychain on iOS or Keystore on Android). This data doesn’t leave your device except to the machine you configured it to reach.

What’s transmitted, and to whom

SSH connection traffic — including terminal and session content, command output, and anything visible in your tmux session — goes directly from your device to the machine you specified, over the SSH protocol. Nothing is routed through or logged by Paperweight Systems infrastructure.

Purchases

The one-time Holster Unlimited unlock is processed by the Apple App Store or Google Play Store. Paperweight Systems doesn’t receive or store your payment details — only what the platform reports for entitlement verification.

Third parties

The app links to its source on GitHub, and is distributed through app store platforms. Those destinations have their own privacy policies and see the traffic you send them.

Changes

We may update this policy as the app changes. The date above reflects the latest revision.

Contact

Questions about this policy: rollingwoodsmedia@gmail.com.