Dockpit – Privacy Policy
Effective date: 26 October 2026
Dockpit – Portainer Manager ("Dockpit", "the app") is published by E2Soft Tech, Ferdous Mansion, Chainda Chararkul, Cox's Bazar - Teknaf Hwy, Cox's Bazar 4701, Bangladesh. Contact: e2softbd@gmail.com.
Dockpit is a tool to manage your own Linux servers, Docker and Portainer from your phone. This policy explains what the app stores, what leaves your phone, and who receives it.
The short version
- There is no account and no sign-up.
- E2Soft Tech runs no server that receives your data. We do not collect, see or sell your servers, passwords, keys, tokens, files or usage.
- Your server credentials are stored only on your phone, encrypted.
- The app connects directly from your phone to your own servers. Nothing passes through us.
- The free version shows ads served by Google AdMob, which collects data as described below. Dockpit Pro has no ads and does not start the ads service.
1. What is stored on your device
- Secrets: SSH passwords, SSH private keys and passphrases, Portainer API tokens and WireGuard configurations. They are encrypted with AES-256-GCM using a non-exportable key in the Android Keystore.
- Server details: the names, addresses, ports, usernames and pinned host/certificate fingerprints of the servers you add, and a local activity log of actions you performed in the app (secrets are redacted from it).
- App settings: theme, selected server, backup and auto-download settings, and a local record of your Pro plan.
All of this stays on your phone. App data is excluded from Android cloud backup. It is deleted when you uninstall the app, or when you remove a server in the app (More → Manage servers), which erases that server's details and secrets. You can clear the activity log in the app. Files you export (for example backups) are saved where you choose and are not removed by uninstalling.
2. What leaves your phone
Your own servers (your choice). When you connect a server, the app sends your credentials and commands over SSH, and API requests to your Portainer, directly to the servers you entered. Optionally, a WireGuard tunnel you configure carries that traffic. We do not receive any of it. You are responsible for those servers and their own privacy practices.
Google AdMob (free version only). The free version shows banner ads using Google Mobile Ads. If you have not consented where required (for example in the EEA and UK), the app asks you first with Google's consent form (User Messaging Platform) and does not start ads until the choice is resolved. You can change your choice in More → Ad privacy choices (shown when required). Google may collect and use: your advertising ID and other device identifiers, IP address (approximate location), ad and app interactions, and diagnostics/performance data about the app and ads. Google shares and uses this data for advertising, analytics and fraud prevention. See How Google uses information from apps that use its services and the Google Privacy Policy. You can reset or delete your advertising ID, or opt out of ads personalization, in Android settings (Settings → Privacy → Ads), and manage ad settings at myadcenter.google.com. Dockpit Pro removes the ads.
Google Play. Purchases of Dockpit Pro (a yearly subscription with a free trial, or a lifetime purchase) are processed by Google Play Billing. Google handles your payment details; we never see your card or payment information. The app only learns whether you have an active Pro entitlement and keeps that status on your phone. App updates may be offered through Google Play's in-app update feature. See the Google Play Terms of Service and the Google Privacy Policy.
Domain checks (only if you use them). In Domains & HTTPS, when you check DNS for a domain, the app sends that domain name (and your phone's IP address, as part of the network request) to Cloudflare's public DNS-over-HTTPS resolver (cloudflare-dns.com). See the Cloudflare privacy policy. The app may also open your own domain's URL to test it.
App logos. When you browse Portainer app templates, the app may download logo images from the web addresses listed in your Portainer template list. Those sites can see your phone's IP address.
Links. Links you tap (for example Portainer's documentation or Google Play subscription management) open in your browser or Google Play, under their own policies.
We do not use analytics or crash-reporting services of our own. Google may separately receive diagnostic data through Google Play (for example Android vitals, if you have enabled usage and diagnostics on your device), under Google's policies.
3. Permissions
Dockpit requests: Internet and network state (to reach your servers and ads); notifications (backup progress and results, optional); a foreground data-sync service (to finish large backup downloads you start); and the advertising ID (for ads in the free version). It does not request location, contacts, camera, microphone or storage access. The optional WireGuard feature uses Android's VPN service only if you add a tunnel.
4. Backups you create
Backups made with Dockpit may contain the data of your containers and stack settings, including environment values, without additional encryption. Store, share and delete them with care.
5. Children
Dockpit is not directed to children and is intended for users aged 18 and over. We do not knowingly collect personal information from children under 13 (or the age required in your country). If you believe a child has used the app, contact e2softbd@gmail.com.
6. Your rights and choices
Because we do not collect your personal data, we hold nothing to access, correct or delete. Depending on where you live (for example under the GDPR or CCPA), you may have rights regarding data held by Google; exercise them with Google through your Google account and ad settings. You can at any time: remove servers or clear the activity log in the app, reset your advertising ID in Android settings, change your ad consent in the app, or uninstall the app. For any privacy question or request, write to e2softbd@gmail.com.
7. Security
Secrets are encrypted at rest on your device. Connections to your servers use SSH with host-key pinning, and HTTPS with certificate pinning for Portainer; cleartext traffic is blocked except for the local loopback used by the SSH port-forward. No method is perfectly secure, and you should protect your phone with a screen lock.
8. Changes
We may update this policy. The effective date above will change, and for material changes we will update the app listing or notify you in the app. Continued use after an update means you accept it.
9. Contact
E2Soft Tech, Ferdous Mansion, Chainda Chararkul, Cox's Bazar - Teknaf Hwy, Cox's Bazar 4701, Bangladesh. Email: e2softbd@gmail.com.
Dockpit is not affiliated with Docker, Inc. or Portainer.io. Docker and Portainer are trademarks of their respective owners.