Privacy

Effective date: October 10, 2026. This notice explains how the HerdRanger public website and Android companion handle information. It covers the current early-access and support forms and will be updated when those practices change.

Who is responsible

HerdRanger is an independent project and is not affiliated with, endorsed by, sponsored by, or released by Herdr. The operator responsible for this site and app can be reached at support@herdranger.com. A formal legal entity name and postal address have not yet been published; this is an item for operator and legal review before public distribution.

Information the website collects

The current static website does not use analytics, advertising trackers, account registration, tracking cookies, a CRM, or an on-site database. The early-access and support forms send only the fields you enter to Formspree, Inc. for form processing and email notification delivery to the verified HerdRanger destination. Formspree’s privacy notice is available at formspree.io/legal/privacy-policy.

Hosting, DNS, security, and delivery providers may receive limited technical information such as an IP address, browser and device characteristics, request time, referring page, requested URL, and abuse-prevention signals in ordinary server or security logs. The hosting provider and exact log-retention period have not been confirmed in the project records and must be documented by the operator. HerdRanger does not use those logs to build advertising profiles.

Early-access form

The active form collects your email address; optional device model and Android version; Herdr usage frequency; broad host operating-system categories; preferred testing areas; testing availability; and a short, non-sensitive workflow description. It also collects required eligibility confirmations that you currently use Herdr, actively use agents, and have SSH access to a host you own or are authorized to administer. We use this information to evaluate interest, assemble a useful mix of testers, contact selected participants, administer the early-access program, provide support, and prevent abuse. Submitting the form is voluntary. Never include passwords, SSH keys, hostnames, host or IP addresses, SSH usernames, backup passwords, terminal output, agent transcripts, screenshots containing secrets, or other sensitive operational data.

Formspree receives the submission as our hosted form processor and sends a notification to info@herdranger.com. Formspree’s current dashboard shows the form enabled, submission archiving enabled, Formshield spam filtering enabled, and CAPTCHA disabled. Those settings, provider retention, and any Formspree sub-processors can change; check Formspree’s current notices for its independent processing practices.

The form uses a hidden honeypot field and browser validation. These controls reduce automated abuse but do not guarantee that every submission is legitimate. We do not use the form to create an account or send an automated marketing newsletter.

Support form

The support form collects the name or identifier you enter, reply email, issue category, app version, Android version, device model, issue description, and required consent acknowledgment. We use these fields to investigate and reply to your request, understand compatibility or accessibility problems, prevent abuse, and improve support documentation. Formspree processes the submission for delivery. The form does not request or automatically attach diagnostics, files, server details, device identifiers, activity history, prompts, transcripts, or agent output.

Do not submit passwords, private keys, pairing or recovery codes, server names or addresses, SSH usernames, host fingerprints, backup files or passwords, prompts, transcripts, agent output, terminal output, or unredacted screenshots. HerdRanger cannot automatically remove sensitive material that you choose to type into a form.

How the Android app handles connection data

You retain control of your data. HerdRanger connects from your Android device directly to the server you configure over SSH. It is not a cloud relay for SSH credentials, terminal output, prompts, agent output, or transcripts.

Connection settings, credentials, and host-trust information are stored in the app’s encrypted local storage to provide the requested connection. They are excluded from automatic Android backup. Optional password-encrypted backups are created only when you request them through Android’s document picker. You remain responsible for device security, Android permissions, host security, exported backups, and network controls.

Microphone, speech, and audio

The Android app can request microphone access only when you choose voice input. It creates a local transcript for your review; the app is designed to send text only when you explicitly choose Add, Edit, or Send. Speech recognition and text-to-speech may be provided by Android or another enabled device service, which may process audio or text under that provider’s terms. Review the provider settings before using voice features. The app does not use the microphone continuously in the background.

Notifications and backups

Optional notifications are best-effort Android alerts for agent attention. They are designed not to include terminal output, SSH credentials, or full agent transcripts, and Android settings control whether they appear. Local app data is stored in encrypted app storage and is excluded from automatic device/cloud backup by the current Android configuration. If you explicitly export an encrypted backup, you are responsible for protecting the file and its password; importing or sharing it can disclose the information it contains.

SSH and remote-host transfers

The app transfers connection requests, commands, session metadata, messages, and any other content you explicitly request directly between your Android device and the host you configure over SSH. HerdRanger is not designed to relay that content through a HerdRanger cloud service. Your host, network, SSH implementation, Android device, and any speech or notification provider may still process information under their own controls. Unknown host keys always require explicit review, and changed keys block authentication without a bypass. Verify host identity independently before confirming it.

Sharing and sale

HerdRanger does not sell personal information or share it for cross-context behavioral advertising. Information may be disclosed to service providers that operate the website, deliver an enabled form, provide email delivery, prevent abuse, or support the app, but only for those operational purposes. HerdRanger may also disclose information when required by law, to protect rights and safety, or as part of a business transfer.

Retention and deletion

HerdRanger will retain early-access and support responses only as long as reasonably needed to evaluate and administer early access, answer support requests, resolve disputes, protect against abuse, or meet legal obligations. A concrete internal retention period remains an operator decision required before beta intake expands. Formspree may retain submissions under its own policies and the form’s archive settings. You may request deletion of HerdRanger-held information by emailing support@herdranger.com; we may need to verify the request and may retain limited information where the law permits or requires it. We will forward or repeat a deletion request to Formspree where applicable, but cannot promise deletion from a provider’s systems outside our control.

Your privacy choices and rights

Depending on where you live and whether a privacy law applies to the operator, you may have rights to request access to, correction of, or deletion of personal information, and to opt out of certain sale or sharing activities. To make a request, email support@herdranger.com with “Privacy request” in the subject line. We will not discriminate against you for exercising a privacy right.

California residents may have additional rights under the California Consumer Privacy Act, as amended, including rights to know, delete, correct, opt out of sale or sharing, limit certain sensitive-information uses, and receive equal service. The current site does not sell or share information for cross-context behavioral advertising. The California Attorney General describes these rights and notice obligations in its consumer guidance. California CCPA information

Security

We use reasonable safeguards appropriate to the information and service involved. No website, device, network, or transmission method can be guaranteed completely secure. Do not send credentials or operational secrets through the website.

To report suspected unauthorized access, accidental disclosure, or another privacy or security incident, contact support@herdranger.com promptly with only the minimum non-sensitive details needed to investigate. Do not attach keys, passwords, terminal output, or agent transcripts.

Children

The website and app are not directed to children under 13, and HerdRanger does not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can review and delete it where appropriate.

Third-party links and services

The website may link to third-party services, including Herdr-related resources, form providers, app distribution services, or support tools. Their privacy practices are governed by their own notices. Review them before submitting information or installing software.

International visitors

Service providers may process information in countries other than the country where you live. Where applicable law requires safeguards for an international transfer, the operator should implement the required mechanism before collecting that information.

Changes to this notice

We may update this notice when the service or its information practices change. The effective date at the top identifies the current version. If changes are material, we will take reasonable steps to highlight them.