Privacy Policy

Last updated: September 29, 2026

This policy covers the Elastron website (elastron.eney.solutions) and the Elastron desktop app. Elastron is a free, open-source project maintained by Anton Korotkov. There are no Elastron accounts, and no Elastron server receives your data.

The website

• The website may use Google Analytics to count visits and downloads. Google Analytics sets cookies and receives your IP address, browser details, and the pages you visit, and handles them under Google's privacy policy. The site works the same if you block it.
• To show the latest version, the download links, and the star count, your browser asks the GitHub API directly.
• Fonts are loaded from Google Fonts.

The desktop app

Your clusters and settings

Elastron connects to your Elasticsearch clusters directly from your machine. Connection details, credentials, SSH settings, search tabs, Playground templates, AI provider keys, and assistant chat history are kept in an encrypted store on your machine. None of it is sent to us.

Usage analytics

The app sends anonymous usage data to Google Analytics, so we can see which app versions and Elasticsearch versions are in use:

• the app version;
• the screens you open;
• when a connection succeeds, the cluster's Elasticsearch version and build flavor;
• that an assistant message was sent, and that its reply arrived, without any of its content.

Google Analytics also receives what it collects with any page view, such as your IP address and device details. The app never reports hosts, ports, connection names, credentials, queries, documents, error messages, or assistant conversations.

Updates

To check for updates, the app asks GitHub for the latest release.

AI assistant

The assistant does nothing until you choose a provider and enter your own API key in Settings. When you use it:

• your messages, the conversation so far, your cluster's Elasticsearch version, and the results of the lookups it runs on your cluster — for example index names, mappings, search results, and, when you ask about access, user names, email addresses, roles, and API key names and owners — are sent from your machine to the provider you chose (OpenAI, Anthropic, Google, or the endpoint you configured), using your key;
• passwords, password hashes, and API key secrets are never included in what is sent;
• lookup results are capped in size before they are sent, and fetching further pages of a long list needs your approval;
• the provider handles that data under its own terms and privacy policy, and bills the usage to your account with it.

Your keys and chat history stay in the encrypted store on your machine. Clearing a conversation in the app deletes its history.

Changes to this policy

When anything here changes, this page and the date at the top are updated.

Contact

Questions about this policy are welcome as an issue on GitHub.