Privacy Policy
Last updated: 4 August 2026 · applies to v1.0.0-beta.1
The short version: the app has no telemetry at all. No account, no sign-up, no analytics, no "anonymous usage statistics", no update check. It never contacts me or anyone else. The only things it connects to are the devices you point it at yourself.
Who is responsible
CrestronUbugga is made by Lee James Apps (a trading name of Lee James), based in the United Kingdom. For anything on this page — questions, requests, complaints — email lee@leejamesapps.co.uk.
The application
What it sends to me: nothing
There is no telemetry, no crash reporting, no licence check, no analytics and no auto-updater in the software. It does not know I exist. You can run it on a machine with no internet connection at all and lose no functionality — and if you want to prove that, block it in your firewall and carry on working.
What it connects to
- The devices you add. SSH and SFTP to the host, port and credentials you entered.
- Your local network, when you press Device search: a UDP broadcast on port 41794. Crestron gear answers with its hostname, IP, firmware and TSID. That's a broadcast on your own LAN — it doesn't leave it.
- Your browser, if you click the 🌐 button, which opens that device's own web interface. That's your browser talking to your device.
That's the complete list.
What it stores, and where
Everything is on your machine, in the app's own data folder
(%APPDATA%\CrestronUbugga on Windows), in a SQLite file called
crestronubugga.db: your folders, devices, hostnames, usernames, ports, notes, plus
local settings and per-device inject buttons. None of it is uploaded anywhere.
Passwords
Device passwords are encrypted with Electron's safeStorage, which uses the
operating system's own facility — DPAPI on Windows, Keychain on macOS, libsecret on Linux —
and are stored as encrypted blobs, not as readable text.
safeStorage reports that OS encryption is unavailable
on your machine — which happens on some Linux desktops with no keyring — the app falls back to
storing the password as marked UTF-8 bytes instead. That is obfuscation, not encryption:
anyone with access to the file could read it. The app logs a warning when this happens. On a
normal Windows install DPAPI is available and this does not apply.
Passwords are sent only to the device they belong to, over SSH, in order to log in.
Backups
The .cubg backup file is genuinely encrypted — AES-256-GCM with a key
derived from your passphrase via PBKDF2. Where you put that file, and who you give it to, is up to
you; it contains your credentials, so treat it accordingly.
Data from your processors
Console output, logs, program details, IP tables, signal traces and any files you open stay in the app on your machine. Nothing is sent off it. If you export or screenshot any of it, that's your copy to look after — processor logs and IP tables can contain client and site information.
This website
- No cookies. The site sets none. There's no consent banner because there is nothing to consent to.
- No analytics, no trackers, no advertising. No Google Analytics, no pixels, no third-party scripts. Every asset is served from this domain.
- No download counter, and no sign-up to download.
- Server logs. Like almost any web server, each request is logged: IP address, timestamp, the page or file requested, and browser user-agent. Used for security and troubleshooting, and rotated away after 14 days.
Lawful basis for those logs: legitimate interests — keeping the server up and secure.
If you email me
A bug report or question sits in my mailbox with whatever you put in it. If you send a log extract or screenshot, please redact client names and site details you'd rather not share — I only need the fault. I keep correspondence while it's useful and you can ask me to delete it.
Who else sees anything
Nobody. There are no third-party services in the app or on this site. The only other party involved at all is the hosting provider for this server, which necessarily handles traffic to it. Nothing is sold, rented or shared for advertising or marketing. Ever.
Your rights
Under UK data protection law you can ask for a copy of what is held about you, ask for it to be corrected or deleted, or object to it being processed. In practice I hold almost nothing: no account exists, and the app sends me no data. That leaves 14 days of web-server logs and any email you've sent me. Write to lee@leejamesapps.co.uk and I'll deal with it within a month.
To remove everything the app has stored locally, uninstall it and delete
%APPDATA%\CrestronUbugga.
If you're unhappy with how I've handled it, you can complain to the Information Commissioner's Office.
Changes
If this policy changes, the date at the top changes with it. If a future build ever added anything that talks to the internet, it would be said here first and plainly.