Privacy, in plain words.

What stays on your Mac

• The Lokstack server listens on 127.0.0.1 only and cannot be reached from the network.
• Every change request needs a custom header and a localhost host, which blocks other websites and DNS-rebinding attacks.
• There is no account, no analytics and no telemetry.
• Secrets in .env files (passwords, secrets, keys, tokens and URL passwords) are masked.
• Your settings live in ~/.stackpilot on your Mac.

When Lokstack uses the network

• When you search for packages (npm, Packagist, PyPI) or install them.
• When you install with Homebrew or pull Docker images.
• When you sign in to GitHub from the app (the sign-in happens on github.com in your browser, and the result is kept in your macOS keychain) and when you push or pull.
• When you activate a Pro key: it is checked with our licence provider, then every 7 days. The free plan and the trial never leave your Mac.

Safe by default

• Destructive actions confirm first.
• Deleting a container keeps its volumes. "Forget" never touches project files.
• Package names and container settings are validated before they reach a package manager or Docker.

This website

This site doesn't use cookies, analytics or third-party fonts or scripts.

Questions

Write to info@thecreativex.com. Lokstack is published by TheCreativex LTD.