Privacy Policy

The short version

Chamber is a desktop application. It has no account system, no server operated by Melodic Development, and no analytics or crash reporting. Everything it does happens on your computer and between your computer and the git remote you configure. We never see your secrets, your keys, or your usage.

What Chamber stores on your computer

• Your age private key is stored in the operating system's keystore: Keychain on macOS, Credential Manager on Windows, Secret Service on Linux. It is never written to disk unencrypted. A recovery kit, if you save one, is an armored export of that key encrypted with a passphrase you choose.
• Local clones of your chambers live in the app's data directory. They contain only ciphertext, the keeper list, and an index of ciphertext hashes.
• App settings such as the list of chambers you have opened, folder order, and theme are kept in a JSON file in the app's data directory.
• Tokens you paste for HTTPS git hosts are stored in the same OS keystore as your key and handed to git through an askpass helper. They are not written to disk or passed on the command line.

What leaves your computer

• Ciphertext and metadata are pushed to the git remote you chose: vault/**.age, the keeper list of public keys and labels, and .chamber/index.json, which holds SHA-256 hashes and sizes of the encrypted files, plus who sealed each one and when. No plaintext and no plaintext hashes are ever committed.
• Git authentication goes directly between your machine and the host, using your SSH agent, git's own credential helpers, Git Credential Manager, or a token you pasted. Melodic Development is not in that path.
• Commit author details are the name and email in the app settings, or a name derived from your OS user and device name if you did not set one. They appear in the repository history like any git commit.

Chamber makes no other network requests. It does not check for updates, load remote content, or send telemetry.

Clipboard and screen

When you copy a secret value, Chamber clears the clipboard 30 seconds later. Revealed values are hidden again after 30 seconds. Chamber cannot control clipboard history managers or screen recording tools you run separately.

Third parties

Your git host is the only third party involved, and your relationship with it is governed by its own terms and privacy policy. Because the host stores only ciphertext, it cannot read your secrets unless it also holds a keeper's private key.

This website

chamber.melodic.dev is a static site. It sets no cookies and runs no analytics. Fonts are loaded from Google Fonts, which may log the request per Google's privacy policy.

Children

Chamber is not directed at children under 13 and does not knowingly collect information from anyone.

Changes

If this policy changes, the new version will be posted here with an updated date. The source code is public, so you can verify any claim on this page against what the app actually does.

Contact

Questions go to rickhopkins@melodic.dev or the issue tracker.