Privacy

Updated 25 October 2026. This covers the website mylinux.app and its account. myLinux Launcher and the machines it runs are programs on your own Mac: they send nothing to this site unless you use the account, from the browser, the launcher's Account window or an installer you run.

What the account stores

• Your sign-in. Accounts are run by Clerk: your email address, and your name and profile picture when you sign in with Google. With Google the site asks only for your basic profile and email address; it gets no access to your Gmail, Drive or anything else in your Google account.
• Machine profiles. The profiles you create (display, keyboard, theme, startup apps, packages and notes).
• API keys. The myLinux API keys you make, kept only as a SHA-256 hash, with the time each was last used. The site cannot show a key to anyone again.
• Saved keys. The keys you choose to save for your machines, such as a Claude Code token or another service's API key, with the name you give each one. They are encrypted (AES-256-GCM, with a key that exists only on the server and is bound to your account and the key's name). The list shows only the last four characters. The site records when a saved key was last fetched.
• Claude files and prompts. The files you keep for Claude Code (settings, CLAUDE.md, agents, commands and skills) and your prompts, encrypted the same way.
• Server logs. The web server records requests (address, time, page) to keep the site running; they are used for nothing else.

There is no advertising, no analytics and no tracking cookie. The only cookies are Clerk's session cookies, which keep you signed in.

When a saved key leaves the site

Only when you ask for it. An installer such as curl -fsSL https://mylinux.app/install/claude | sh asks for one of your myLinux API keys and uses it to fetch the saved keys it needs, over HTTPS, into the machine you run it in. It keeps that API key in ~/.config/mylinux/api-key on that machine for the next installer. Revoke the API key in the account and it stops working everywhere at once.

What the site's owner is told

The person who runs the site gets an email when someone downloads the launcher through a Download button here, and when someone makes an account or signs in, with a short summary each morning.

• A download: when, the kind of computer (Mac, Windows and so on, from the browser's own description), the browser's language and the site you came from. Not your address or anything that names you.
• An account or a sign-in: when, and the account's email address and name.

The site keeps these notes for 90 days for the summaries. The emails go from the server that runs this site to its owner's own mail server; no outside mail service sees them.

Videos

The videos on the home page are on YouTube. Until you press play, the page shows a picture kept on this site and nothing is loaded from YouTube. Pressing play loads YouTube's player from youtube-nocookie.com, and from then on Google's privacy policy covers what YouTube does.

Where it is kept

Profiles, hashes, saved keys and Claude files are in a database on the server that runs this site, rented from Contabo. Sign-in data is kept by Clerk, Inc. in the United States, under Clerk's privacy policy. The launcher and the Linux images are downloaded from GitHub. Nothing is sold or shared with anyone else.

Deleting your data

Machines, API keys, saved keys and Claude files can be deleted in your account at any time, and are gone at once. To close the account, delete what you saved first, then choose Delete account under your profile menu › Manage account. Or write to the address below, and the account and everything in it is removed within 30 days.

Contact

myLinux is run by Viktor Kjartansson. Questions about your data: viktor.kjartansson@gmail.com.