Privacy policy
DestructGuard is a local-first guardrail for destructive shell commands. This page describes what data we collect when you use the web app, Shopify Team app, and CLI — and what stays on your machine.
Last updated: June 2026
Summary
- CLI audit logs stay on your device at
~/.destructguard/audit.jsonl. We do not upload them to our servers. - Shopify Team stores session and subscription data needed to bill and issue premium feed tokens.
- Web tools may save rules drafts in your browser localStorage only.
Shopify app (DestructGuard Team)
When you install and use the embedded Shopify app, we process:
- Shopify session data — shop domain, access tokens, and OAuth session identifiers required by Shopify to authenticate the app.
- Subscription status — whether your Team plan is active, pending, or cancelled, via the Shopify Billing API and subscription webhooks.
- Premium feed tokens — a unique token issued per active subscription so the CLI can download premium rules. Tokens are revoked when the subscription ends.
Session storage uses Prisma with a database on the app host. We do not sell shop data or use it for advertising.
Web app (destructguard.vercel.app)
The public site and free tools collect minimal data:
- Rules editor drafts — optional JSON saved in your browser localStorage until you clear it.
- Audit viewer — pasted JSONL is processed in your browser only; it is not sent to our servers unless you explicitly export or download.
- Premium rules API — when you call
/api/rules/premiumwith a valid Team feed token, we log the request for entitlement checks only (token validation, no command audit content).
Standard hosting logs (IP, user agent, request path) may be retained by our host (Vercel) for security and operations.
CLI and local data
The DestructGuard CLI runs entirely on your machine. Guard decisions, matched rules, and audit entries are written locally. Command audit trails do not leave your device unless you copy or sync them yourself.
destructguard rules update downloads public or premium rule JSON from our hosted feed. It does not upload your local rules or audit log.
Data retention and deletion
- Uninstalling the Shopify app triggers cleanup of session data and revokes feed tokens.
- Clear browser storage to remove web rules drafts.
- Delete
~/.destructguard/to remove local CLI config and audit logs.
Contact
Questions about this policy or your data: support@hermesplant.com