We collect nothing.

goatr has no accounts, no analytics, no advertising identifiers and no third-party trackers. There is no goatr service in the middle of your connection: the app talks directly to your own server over SSH, and nothing about the connection is sent anywhere else.

On this website

This site is a set of static files. It sets no cookies, runs no analytics scripts and loads nothing from a third party.

On your server

When you enable session persistence, goatr writes into ~/.goatr in your home directory on the servers you connect to: a small self-contained binary, its session sockets and metadata, and shell wrappers that restore your environment. It does not edit your .bashrc or .zshrc — those wrappers sit alongside your real config rather than replacing it. No root access is used or required, and nothing is written to a server until you approve setup for it.

If you also opt into the Claude Code helpers, goatr adds a permission block to ~/.claude/settings.json. That is the only file it touches outside ~/.goatr.

Deleting ~/.goatr undoes everything else, so your server is as it was apart from that one settings file. If you used an earlier version of the app, its components went to ~/.longterm instead: that directory is left in place, and nothing in the app migrates or deletes it. Remove it yourself when you no longer want it.

Your keys

SSH keys are generated on your device and stored in the iOS keychain. The private key is never sent anywhere — the server only ever receives the public half. If you connect with a password instead, it is stored in the iOS keychain too and sent only to the server you are connecting to.