Privacy Policy

Last updated: October 28, 2026

1. Introduction

axpdev-lab ("we", "us", "our") operates the AeroFTP desktop application and the aeroftp.app website (collectively, the "Services"). This Privacy Policy explains how we handle information when you use our Services.

The desktop application has no product analytics or automatic crash reporting. File transfers, optional services and the website have separate data handling described below.

2. Desktop Application (Windows, macOS, Linux)

AeroFTP is free and open source. It stores profiles, settings, credentials, chat history, sync journals and diagnostic logs locally. Configured file and cloud services, background sync, health checks, update checks and enabled peer discovery can communicate over the network. Optional AI providers and external MCP services can receive prompts, file context, tool calls and results. The desktop has no product analytics, usage tracking or automatic crash reporting.

The credential vault encrypts entries with AES-256-GCM. Its unlocking passphrase normally uses the operating system keyring; master-password mode provides additional password-based protection. If the keyring is unavailable, a permission-protected on-disk fallback may store the unlocking passphrase beside the encrypted vault. See the desktop privacy documentation for details.

3. AeroVault Encryption

AeroVault encrypts file containers locally. AeroCrypt provider overlays, the credential vault and password-protected archives are separate workflows. Encrypted files can be sent to the storage provider you select. We cannot recover a lost encryption passphrase.

4. Website (aeroftp.app)

Our website uses a self-hosted, privacy-focused analytics system. In anonymous, aggregated form, the self-hosted system collects:

• Anonymous page view counts
• Browser type and operating system (no fingerprinting)
• Referrer URL
• Country (derived from IP, which is not stored)

We also use Google Analytics 4 (provided by Google LLC) with IP anonymization enabled, to measure aggregate traffic. Both analytics systems load only after you accept the analytics category in our cookie banner; until then no analytics script runs and no analytics cookie is set. If you decline, only strictly necessary technical cookies are used, and you can change or revoke your choice at any time from the "Cookie Settings" link in the footer. Google Analytics is a third-party service governed by Google's Privacy Policy. For the full list of cookies, see our Cookie Policy.

5. Third-Party Services

Configured storage and AI services, external MCP servers and update services have their own privacy policies. AeroShare prefers direct peer connections, but discovery services and relays can observe connection metadata; a relay may forward encrypted packets. Website resources and the website chatbot can also process requests and messages. Please do not submit passwords or other secrets to the chatbot.

6. Open Source Transparency

AeroFTP is open source. You can inspect the complete source code on GitHub to verify our privacy claims independently.

7. Children's Privacy

Our Services are not directed at children under 13. We do not knowingly collect any information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

9. Contact

If you have questions about this Privacy Policy, contact us at: privacy@aeroftp.app