Privacy Policy

Last updated: October 1, 2026

The desktop app

OB Commander runs entirely on your PC. It contains no telemetry and no analytics, and it collects nothing about you or your files.
It is portable: the config file, the session and its SQLite cache (folder sizes and file comments) all live next to the exe (the Microsoft Store version keeps them in %LOCALAPPDATA%\OB Commander instead, because Store apps cannot write to their install folder). Nothing is written to the registry.
No account or registration is required.
Starting a Pro trial or activating a licence sends our licence server two things: a machine fingerprint — a one-way hash of your computer's hardware ID, from which the ID itself cannot be recovered — and, when activating, the licence key you entered. We use them only to allow one trial per computer and to count activations. The server returns a signed licence bound to this computer; from then on it is checked offline and the app does not contact the licence server on start-up. The email address you bought with is encoded in the licence and shown in the About box on your own screen.

Checking for updates: on start-up the app fetches one static JSON file from obcommander.com to compare version numbers. It is an ordinary web request that sends no personal data; our host may log the request the way any web server does. The window's Help menu shows what came back.
Licence server (only when you start a trial, activate or deactivate): the app sends the machine fingerprint described above and, for activation and deactivation, your licence key to api.obcommander.com over HTTPS. Activations are passed on to Creem's licensing service, which counts them against your licence.
Remote SFTP (Pro): connects only to the servers you name, using the SSH credentials already configured on your machine. Nothing is routed through us.
Previewing HTML or Markdown uses the WebView2 component built into Windows. If the file you preview references external resources, WebView2 may fetch them, exactly as a browser would. Scripting inside previewed HTML can be turned off in the config file.
Everything search, archive browsing and every file operation are local. They never leave your machine.

We set no cookies and show no ads. To count visits we use Cloudflare Web Analytics, which also sets no cookies and gives us only aggregate numbers such as page views, referring sites, browsers and countries; see Cloudflare's privacy policy.
Your browser's localStorage is used only to remember your language choice; it never leaves your device.
If you subscribe, we keep the email address you enter, with the time and your language, and use it only to send you OB Commander news: new releases, tips and occasional offers. To unsubscribe, email support@obcommander.com at any time and we delete your address. We never sell or share it.
The site is served by our hosting provider, Cloudflare. Like any web host, it may keep standard access logs (such as IP addresses) for security and operations; see Cloudflare's privacy policy.

Payments are handled by Creem, our merchant of record. Your payment details go directly to Creem; we never see or store your card number. See Creem's privacy policy.
From Creem we receive only the order information needed to issue your licence key and provide support: your name, email address, country, order number and licence key.

For any privacy questions, email support@obcommander.com or open an issue on GitHub.