We don't run your server, so we don't have your data.
Hisar is open-source software. Each Hisar server is run by whoever installed it: you, your company or a friend. This page explains what that server stores, what the apps send, and what this website collects.
Who is responsible for your data
The operator of the server you sign in to decides how long data is kept, who can create accounts and how backups are handled. Questions about an account, or requests to see or delete it, go to them. If you run your own server, that's you.
tosunlab, in the Netherlands, writes the software and runs this website. It also runs api.tryhisar.com, the server the apps suggest at sign-in, which has its own privacy policy.
What a Hisar server stores
| Data | Operator can read it | Why it's kept |
|---|---|---|
| Passwords, notes, one-time code seeds, SSH keys, item titles, URLs, vault names | No, end-to-end encrypted | To sync your vaults between devices |
| Account email | Yes | Sign-in, invitations and sharing |
| Who can open which vault | Yes | To deliver shared vaults to members |
| Item counts, sizes and change times | Yes | To sync changes |
| Devices, IP addresses, app versions | Yes | Security and compatibility |
| Share links: creator, size, expiry, view limit, views, and the IPs that open them | Yes, but not the contents | To enforce expiry and view limits |
Previous versions of items are kept, encrypted, for 90 days. You can delete your account in the apps or the CLI: vaults only you own go with it, and vaults you share stay with their other owners. Logs and backups are kept for as long as the operator sets.
What the apps send
- The Mac app, iPhone app and CLI talk to the server you sign in to, and nowhere else.
- No analytics, tracking or usage data are sent to the Hisar project or anyone else.
- The Mac app gets its updates from your server, which fetches them from GitHub Releases. GitHub sees your server, not your Mac.
- The browser extension talks to the Hisar app on the same computer. It doesn't send the pages you visit anywhere.
- Approvals sent to your iPhone travel through your server, end-to-end encrypted and signed.
This website
Hetzner Online GmbH hosts this site in Helsinki, Finland, and its web server keeps standard access logs, including IP addresses, for 14 days. The site sets no cookies and uses no analytics. Downloads come from GitHub, under GitHub's privacy statement.
Running a server for other people?
Then you're responsible for the data in the table above. At a minimum:
- Tell your users who runs the server and how to reach you.
- Decide how long you keep logs and backups, and say so.
- Protect backups: vault contents are encrypted, emails and IP addresses aren't.
- Your email provider also handles the addresses invitations go to.
- Answer requests to see or delete an account.
Changes and contact
This page lives in the website's repository, so every change is in its history. Questions about the project or this website: support@tryhisar.com. Questions about an account: ask whoever runs your server.