Summary: Pulse does not collect, store, transmit, or monetize personal data. All monitoring traffic travels directly between your Mac and your Linux hosts over encrypted connections. We operate zero cloud relays and collect zero telemetry.

1. Zero Telemetry and Analytics

Pulse (the macOS application and the Linux agent daemon) contains no tracking code, telemetry SDKs, Google Analytics, Mixpanel, Crashlytics, or third-party beacons. We do not collect IP addresses, device identifiers, hardware configurations, server counts, or usage habits.

2. Direct Point-to-Point Architecture

Pulse does not operate a centralized backend proxy. Communications occur strictly point-to-point:

Direct IP / LAN: Encrypted WebSocket and TLS 1.3 directly between your Mac and your server listening port.
Tailscale: Encrypted WireGuard tunnel between devices on your private Tailnet.
Cloudflare Tunnel: Direct tunnel through Cloudflare edge using your configured tunnel credentials.

System metrics, logs, Docker container names, and systemd units remain exclusively on your own machines.

3. Local Storage of Credentials

Configuration data is stored locally on your devices:

Server authentication tokens, TLS fingerprints (TOFU pinning), and host addresses are saved in macOS local storage.
On the Linux node, configuration and TLS certificates are stored in /etc/pulse-agent (root mode) or ~/.pulse (user mode) with strict 0600 file permissions.
Pairing codes (format XXX-XXX) are ephemeral with a 10-minute time-to-live and are deleted upon pairing or expiration.
Tokens copied to your clipboard are cleared from memory after 60 seconds.

4. External Integrations (Optional)

If you enable optional third-party integrations:

Telegram Bot Notifications: Outbound alert webhooks connect directly from your Linux agent to api.telegram.org using your own Bot Token. No intermediary server is involved.
Software Updates: The macOS app uses Sparkle 2 to check for updates by fetching the static appcast.xml manifest from GitHub Releases. No identifiers are sent during update checks.

5. Open Source Verification

Both the macOS client and Linux agent are open source under the MIT License. You can inspect the source code, build from source, or audit outgoing network connections.

6. Contact

For questions regarding privacy or security practices, open an issue or discussion on the official GitHub repository at github.com/miftahganzz/Pulse.

Privacy Policy