The Kubebar app contains no analytics or tracking tools.
Kubebar reads your kubeconfig file and communicates directly with your Kubernetes clusters to display health status, pod information, and logs. These connections are made exclusively between your device and your clusters.
When you activate a purchased license, the app sends the following to our license server
(lic.kubebar.app, hosted at OVH in the EU) to verify your license and enforce the agreed
device limit: your license key, a hashed device identifier (no plaintext hardware ID),
the device name, and your IP address (technically required during transmission). This data is stored
while the license is active and used solely for license management. You can deactivate a device at any
time in the app. During the 14-day trial no such data is transmitted; after activation the app continues
to work offline. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Purchases are handled by our reseller Paddle.com Market Limited (Merchant of Record), which is the seller of record and processes your payment, billing data, and email address. Paddle's privacy policy applies. After purchase, our server generates a license key and sends it by email to the address you provided (sent via our email provider OVH in the EU). We store your email address to associate it with the license and for support. Legal basis: Art. 6(1)(b) GDPR.
On startup and once a day the app checks whether a newer version is available by fetching a
file from kubebar.app. No device or usage data is sent.
This request carries a random installation ID — a UUID generated on first launch, with no link to your device, your account or your kubeconfig. We use it for one purpose: counting how many installations are actively running. The IP address of this request is not written to our logs; the anonymous ID is all we keep. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in knowing whether the software is actually used. Entries are deleted 90 days after the last contact.
Kubebar can explain logs, events and errors and suggest resource settings with the help of an AI model. This feature is off by default: nothing is sent until you choose a provider (Anthropic, OpenAI or Ollama) in Settings and, for Anthropic and OpenAI, enter your own API key. You use the provider under your own account and agreement with them.
When data is sent. Only when you click one of the AI actions — nothing runs in the background. Each click sends one request directly from your device to the provider; it does not pass through our servers, and we never see its content.
Your kubeconfig, credentials, cluster name and full resource manifests are not sent. The assistant window shows which provider receives the request and lets you view exactly what was sent.
Secret masking. Before sending, Kubebar replaces common secret patterns with
«redacted»: private keys, JWTs, bearer tokens, values of fields such as
password, token or api_key, and AWS, GitHub, Slack and
sk- style keys. Masking is always on, but it is pattern-based and cannot recognise every
secret, so please do not select log lines that contain credentials in other forms.
API keys are stored only on your device: in the macOS Keychain, and on Windows
encrypted with the Windows Data Protection API (DPAPI) for your user account in
%APPDATA%\Kubebar\settings.json. They are sent only to the provider they belong to.
Retention. Kubebar keeps no copy of prompts or answers — they disappear when you close the window, unless you save them to a file yourself. How long the provider retains requests is governed by its own terms: Anthropic, OpenAI.
Ollama sends requests to the address set in Settings, by default
http://localhost:11434 on your own machine. With that default the data never leaves your
device. If you enter another address, the data goes to that server instead.
To stop using the assistant, remove your API key in Settings. Legal basis for the transfer, which you trigger yourself: Art. 6(1)(a) and (b) GDPR.
This website does not use tracking tools, analytics services or advertising cookies. The only cookie
we set is kb_notrack, and only if you explicitly open a page with ?notrack=1
to exclude yourself from our visit counts.
To count visits and downloads, our web server (OVH, EU) writes a short log line for each page view,
installer download and download-button click: time, page or file, browser type (e.g. "browser",
"bot", "Homebrew") and your IP address, plus the ref parameter if the link
you followed carried one. We use these logs only for aggregate numbers such as daily visitors and
downloads, do not share them and do not combine them with other data. Entries are
deleted after 90 days. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in
knowing how the website is used. Checkout is provided by Paddle (section 4).
Questions? Contact us at: privacy@kubebar.app
Last updated: September 2026