Privacy & security

DiceTerm is a local application. It does not phone home, collect usage data, or make network connections on your behalf. The only traffic that leaves your machine is the traffic you initiate.

Network connections

DiceTerm makes no network connections of its own — no telemetry, no analytics, and no automatic update downloads. The one exception is the GitHub releases feed, which DiceTerm checks to let you know when a newer version is available. That check is a plain HTTP GET to the public GitHub API; no identifying information is sent.

The only real traffic is the SSH connections you open yourself. DiceTerm spawns ssh.exe as a child process and connects to the host you chose — everything flows through the system OpenSSH client, not through any DiceTerm infrastructure.

Saved servers

Saved server entries store host, username, and port only. DiceTerm never stores or reads your SSH passwords or private keys — authentication is handled entirely by the system OpenSSH client, which reads ~/.ssh/config and your key agent the same way any other SSH client would.

Password manager

The built-in password manager vault is encrypted with Windows DPAPI (the same credential-protection mechanism Windows uses for browser passwords and Wi-Fi keys). The vault is tied to your Windows user account and cannot be decrypted on another machine or by another user account.

Scripting API

The scripting HTTP API is opt-in — it is off by default and must be explicitly enabled in Settings → Scripting.

When enabled:

• It listens on localhost only — it is not exposed on the network.
• Every request requires a Bearer token stored in %APPDATA%\DiceTerm\api-token.txt.
• Webhooks may only target localhost URLs — they cannot phone out to the internet or your LAN.

See Scripting API for the full reference.

Local state

All DiceTerm state is written to %APPDATA%\DiceTerm\ on your machine:

File	Contents
session.json	Settings, layouts, scrollback, workspace state
session.backup.json	Rolling backup of the previous session
window.json	Window size and position
api-token.txt	Scripting API Bearer token

Nothing in this directory is uploaded or synced anywhere by DiceTerm.