Privacy

Last updated: October 7, 2026.

What Kubesonar collects

Nothing about your cluster. Kubesonar runs on your Mac and talks only to the Kubernetes API servers in your kubeconfig. Workload names, policies, metrics, logs and shell sessions never leave your machine.

The only network calls to us are for licensing: the trial check and license activation and validation, at launch and about once a day. They carry your license key, an irreversible hash of your Mac's hardware ID (which is also sent to our merchant of record, Creem, as the activation's instance name) and a random request nonce. Never your hostname, and nothing about your clusters. Our license server stores only that hash and the trial start date for each Mac, plus the license record. That is the complete list.

What we do not do

• No analytics, telemetry or crash reporting in the app.
• No account. The app has no login.
• No cookies, tracking pixels or third-party scripts on this website. It loads fonts from Google Fonts; that request sees your IP address like any web font.

Where things live on your Mac

Cluster credentials stay in your kubeconfig, untouched. The license key and trial start date live in the macOS Keychain. Preferences (theme, layout) live in the app's sandboxed container. Uninstalling removes the container; the Keychain items can be removed with Keychain Access.

Payments

Purchases are processed by our merchant of record, Creem (creem.io), which collects the billing details it needs to issue an invoice and handle taxes. Charges appear as CREEM.IO. Creem's privacy policy applies to that data; we receive your e-mail address and the license record.

Contact

Questions about privacy: hello@kubesonar.com.