Gyst privacy policy

Last updated: November 2, 2026

Gyst is a browser extension for Chrome and Firefox that recognizes the websites and servers you manage and gives you quick access to their admin panels, logins and actions. This policy explains what data Gyst handles and where it goes.

Short version

• Gyst has no server. The developer does not collect, receive or sell any of your data.
• Everything Gyst stores stays in your browser.
• Data only leaves your browser when you turn on a feature that needs it (team sync, DNS fallback), and it goes to the service you chose, not to the developer.

What Gyst stores in your browser

• Sites, servers, panels, packs, actions, workflows and settings you add or import.
• A short-lived log of the pages you visit in each tab: the URL, the server IP address and response headers of the main page. Gyst uses it to recognize the site and its hosting platform. Entries are deleted when the tab closes and after 24 hours at most.
• Login page addresses and panel details you save. Gyst does not store your passwords.
• Your GitHub access token, if you connect team sync.

This data stays in your browser’s extension storage. Uninstalling Gyst deletes it.

How Gyst uses page access

Gyst can read pages on any website because your sites can live on any domain. It uses that access only to:

• recognize the current site and its platform (for example WordPress or cPanel) from the URL, page markup and response headers;
• run actions you trigger, such as finding a login form or listing WordPress plugins on the site you are on.

Gyst does not change or block web requests, does not inject ads and does not track your browsing for anyone else.

When data leaves your browser

Only in these cases, and only after you turn them on:

• Team sync (GitHub). If you connect a GitHub account, Gyst reads and writes a gyst.json file in a private GitHub repository that you or your team own. It contains the shared sites and configuration, not your browsing log. GitHub’s privacy policy applies to that data.
• DNS fallback (Cloudflare). If you enable it in settings, Gyst asks Cloudflare’s public DNS service (1.1.1.1) for a site’s IP address when the browser did not provide one. Cloudflare sees the domain name. Firefox uses its built-in DNS lookup instead when it can.
• Actions on a site. Actions you run talk to the site you are on (for example its WordPress API), using your existing session on that site.

Sharing and sale

The developer does not receive your data, so there is nothing to share or sell. Gyst does not use your data for advertising, credit decisions or any purpose unrelated to the extension’s features.

Remote code

Gyst does not download or run code from the internet. All code ships inside the extension. Packs are configuration data read by that code.

Changes

If this policy changes, the new version will be posted at this address with a new “Last updated” date.

Contact

Questions about this policy: support@koval.xyz