We collect nothing.

Effective date: May 22, 2026  ·  Applies to: BrightNexus (macOS app) and the BSH shell

BrightNexus — macOS App

BrightNexus is a local menu-bar app that listens on a user-owned Unix domain socket and decrypts structured credential payloads delivered by BSH (or any other BrightLink client) via JSON over the local socket. It operates entirely on-device:

• No network connections are made by the app.
• No data is written to disk beyond what you explicitly direct it to do (e.g. filling a form field you have open).
• Decrypted payloads are held in memory only for their declared ttl and then purged.
• Session keys are ephemeral — derived in memory per shell session and never written to disk.
• No crash reports, analytics, or usage metrics are collected or transmitted.
• The app does not request access to contacts, camera, microphone, or any other sensitive system resource beyond the local socket it serves. Location access, when enabled, is mediated by per-binary ACL prompts under your control.

BSH (BrightShell)

BSH is an open-source shell distributed as source code and compiled locally on your machine. It inherits the privacy characteristics of the upstream zsh shell:

• No telemetry, analytics, or update-check pings are built into the shell.
• No data about your commands, environment, or system is transmitted anywhere.
• History files, if enabled, are stored locally on your machine under your control.
• The BrightLink module (bsh/brightlink) communicates only with the local BrightNexus app over a local Unix socket — no traffic leaves the machine.

This Website

The BSH project website (bsh.digitaldefiance.org) uses Google Analytics (tag G-9B44JCDZN5) to collect aggregate, anonymised page-view statistics (pages visited, approximate region, browser type). This data is governed by Google's Privacy Policy. No personally identifiable information is collected by the website itself. Website analytics are entirely separate from the BSH shell and BrightNexus — neither of those products has any connection to this website or its analytics.

Third-Party Services

BrightNexus and the BSH shell do not integrate with any third-party analytics, crash-reporting, advertising, or data-collection services. There are no in-app purchases, subscriptions, or accounts.

Children's Privacy

Because no data is collected at all, BSH and BrightNexus are safe for users of any age under applicable data-protection laws including COPPA and GDPR.

Changes to This Policy

If this policy ever changes, the updated version will be posted at this URL with a new effective date. Given that our policy is "collect nothing", we do not anticipate substantive changes.

Contact

Questions about privacy can be directed to the project via GitHub Issues or the BrightNexus repository.