Small Commander — version 1, in effect from 18 August 2026.
This is an agreement between you and Deep-On Inc. (deepon.kr) about the Small
Commander software. Installing or using it means you accept it. If you do not,
delete it; you have paid nothing and owe nothing.
1. What you may do
Small Commander is free. You may install and use it on any number of computers
you own or administer, for any purpose including commercial ones, for as long
as you like. No account, no registration, no licence key.
2. Where to get it
Small Commander may only be distributed by Deep-On Inc., from deepon.kr and the
channels named there. You may not host it publicly, mirror it, bundle it into
anything else, or pass copies to people outside your organisation, whether or
not you charge for it.
Deploying it internally is fine: if you administer a fleet, you may copy the
application to the machines you administer, which is what section 1 invites you
to do.
This is not about control for its own sake. Every copy is signed and notarised
by Apple, and a mirrored copy goes stale: it stops receiving fixes, it may fail
Gatekeeper as certificates roll over, and someone downloading it has no way to
tell it from a tampered one. Sending people to deepon.kr is the only way anyone
can be sure what they are running.
3. What you may not do
You may not sell it, rent it, or include it in anything you sell. You may not
present it as your own work or remove its name and marks from it. You may not
decompile or disassemble it, except where the law says such a term cannot bind
you.
Small Commander is not open source. The source is not published, and this
agreement grants no rights to it.
4. Who owns it
Deep-On Inc. This agreement grants permission to use the software; it transfers
nothing. Rights not granted here are reserved.
5. Other people’s things
Small Commander shows weather data from the Norwegian Meteorological Institute
under CC BY 4.0, and uses Apple frameworks and symbols under Apple’s terms.
Those materials are covered by their own licences, set out in NOTICES.md, and
nothing here changes them. Nothing in section 2 restricts any right those
licences give you in the material they cover.
6. What it does to your files and your servers
Small Commander copies, moves, renames and deletes files, on this computer and
on servers you connect it to, because you tell it to. It does what it is
asked. It cannot know which of your files matter.
It also reads ~/.ssh/config and, if you use the Hosts window, writes to it —
only inside a block it marks as its own, leaving everything else untouched, and
after taking a backup the first time.
Keep backups. Nothing here promises that a copy, a move or a delete will
finish, or that a server will still be reachable halfway through one.
7. No warranty
The software is provided as is, with no warranty of any kind, express or
implied, including any warranty of merchantability, fitness for a particular
purpose or non-infringement. Deep-On Inc. does not warrant that it is free of
defects, that it will run without interruption, or that it will work with any
particular server, filesystem or version of macOS.
8. Limits on liability
To the fullest extent the law allows, Deep-On Inc. is not liable for any lost data,
lost profits, lost time, business interruption or any indirect, incidental,
special or consequential damage arising from the software, even if told such
damage was possible.
Where liability cannot be excluded, it is limited to the amount you paid for
the software, which is zero.
Nothing here excludes or limits liability for wilful misconduct or gross
negligence (고의 또는 중대한 과실), for death or personal injury caused by
negligence, for fraud, or for anything else that may not lawfully be excluded.
Consumer protection law in your country may give you rights this agreement
cannot take away.
9. Services this software talks to
The weather banner and the optional email sign-up depend on services described
in PRIVACY.md. They may change or stop. The application keeps working without
them; a weather banner that cannot reach its service says so and the rest of
the app is unaffected.
10. Location
If — and only if — you switch the weather banner to “My location”, the
application asks macOS for this Mac’s coordinates and sends them, truncated to
four decimal places, to the Norwegian Meteorological Institute to fetch the
forecast for that place. They go directly from your Mac; Deep-On Inc. neither
receives nor stores them.
What is collected, why, for how long, who receives it and how to stop it are
set out in the privacy notice, which forms part of this agreement.
Switching the weather to Off, or to a named city, ends it. So does withdrawing
the permission in System Settings.
11. Ending it
If you break these terms and the breach can be put right, this licence ends
thirty days after we tell you about it, unless you have put it right by then. A
breach that cannot be put right ends it at once. You may end it at any time by
deleting the software.
Sections 2, 3, 4, 7, 8, 12, 13, 16, 17 and 19 survive the end of this licence.
Section 2 in particular: someone who breached it by mirroring the application
does not get released from that term by having breached it.
12. Export
You may not use or re-export the software in breach of applicable export
control or sanctions law.
13. Law
Korean law governs this agreement, and the courts of
Daejeon District Court have jurisdiction.
This does not take away rights your own law gives you. If you are a
consumer, this choice of law does not deprive you of the protection of the
mandatory provisions of the law of the country where you live, and you may
bring proceedings there. A consumer may only be sued in the courts of their own
country of residence.
14. Support
There is none promised. [email protected] is read and usually answered, but
this is a free application and nothing here obliges Deep-On Inc. to reply, to
fix anything, or to keep publishing new versions.
15. Changing these terms
New versions of the application may come with new terms. Those apply to that
version, and the application will show them to you and ask before you use it.
The terms you accepted for a version you already have do not change under you.
16. Names
“Small Commander”, “Deep-On”, “HTMLook” and “Kandela” are marks of
Deep-On Inc. This licence grants no right to use them.
17. Transfer
You may not transfer this licence. Deep-On Inc. may transfer it, together with
the application, to a successor in business.
18. The privacy notice
The privacy notice (PRIVACY.md, and PRIVACY.ko.md for readers in Korea) is part
of this agreement and describes what the application sends and to whom.
19. The whole agreement
This is the entire agreement about the software and replaces anything said
before it. If any part is unenforceable, the rest stands.
Small Commander — version 1, in effect from 18 August 2026.
Deep-On Inc. (deepon.kr) makes Small Commander. This says what the app sends,
when, and to whom. It is short because the app does little, and everything it
does do is listed.
Every contact route here is [email protected]. Korean law asks for “a
telephone number or other contact details” for the privacy officer; an email
address is what Deep-On’s other service, ChargePark, already publishes for the
same role.
The short version
Small Commander needs no account. It works fully offline apart from the servers
you point it at yourself. It has no analytics, no crash reporting, no
advertising identifiers, and no third-party SDKs of any kind — there is no
third-party code in it at all.
Everything that leaves your Mac
What
When
Where it goes
How to stop it
Your email address
Only if you type one into the first-run window or the “free key” sheet
Deep-On
Do not type one. Nothing is remembered if you skip it
One install count: the app’s version, the macOS version and build, and nothing else. No identifier: no account, no device ID, nothing that links it to you or to a later launch. Like any web request it does reveal the IP address it came from
Once, on first run, only if you tick the box in the window that explains it — it is not ticked by default
Deep-On Inc.
Leave the box alone
Coordinates, rounded to four decimal places (about 10 m). The request also reveals your IP address to them, as any web request does
Only while the weather banner is switched on, at most once every fifteen minutes
api.met.no — the Norwegian Meteorological Institute, in Norway
Set the weather to Off in Settings
A city name you typed
When you set the weather to a city
Apple, through the geocoder built into macOS. Apple’s own privacy terms govern it
Use Off, or “My location”
Whatever you ask it to
When you browse, copy, or run a command on a server
The server you chose
—
One more is possible but switched off: if a paid Open-Meteo key is ever
configured in place of the free weather service, coordinates would go to
customer-api.open-meteo.com, operated by OpenMeteo GmbH in Switzerland,
instead of to Norway. No released build carries such a key, and without one the
app does not contact them at all.
That is the complete list.
What never leaves your Mac
File and directory names. The cache of what your servers contain is a
local SQLite file, readable only by your account.
File contents. Nothing is uploaded anywhere. Files move between the
places you tell them to move between.
Passwords. Kept in the macOS Keychain. They are never written to a file,
never placed in a command line, and never put in an environment variable.
Your SSH configuration. Read from ~/.ssh/config to list your hosts.
Never sent anywhere.
Your location
Only if you choose “My location” for the weather banner. macOS asks first, and
the coordinates are used to pick the nearest forecast and for nothing else. If
you choose a city instead, or Off, no location is used.
Your email address, if you give one
Used to send what you asked for — a trial key, release notes — and nothing
else. Every message carries a one-click unsubscribe. Ask
[email protected] and it is deleted.
Sending data out of Korea
Two of the rows above leave the country, and Korean law asks that this be
said plainly rather than buried:
Who receives it
Where
What
Why
Norwegian Meteorological Institute
Norway
Coordinates to four decimals, IP address
To return the forecast for that place
Apple Inc.
United States and elsewhere
A city name you typed, via macOS
To turn a name into coordinates
Neither is optional-but-hidden: both happen only while you have the weather
banner switched on, and switching it off in Settings ends them.
Keeping and deleting
Email addresses: kept until you unsubscribe or ask for deletion, and in any
case no longer than three years after the last message you opened.
Install counts: aggregated to a number. Individual requests, including their
IP addresses, are kept no longer than three months.
Weather and geocoding: nothing is stored by us at all. Those requests go
straight from your Mac to MET Norway and to Apple; we never see them.
Your rights
Under Korean PIPA and, if you are in the EU or UK, the GDPR, you may ask what
is held about you, correct it, have it deleted, or object to its use. Write to
the address below.
You may also ask for processing to be restricted (GDPR Art. 18) and for a
copy of what you gave us in a portable form (Art. 20), and you may withdraw
consent at any time without affecting what was done before you withdrew it.
You have the right to complain to a supervisory authority. In the EU that
is the data protection authority where you live or work; in the UK it is the
Information Commissioner’s Office (ico.org.uk); in Korea it is the Personal
Information Protection Commission (pipc.go.kr).
Where the GDPR applies, the lawful bases are: consent for your email
address, which you give by typing it and withdraw by unsubscribing; and
legitimate interest for the one-off install count. The interest is simply
knowing how many people install the application, which cannot be learned any
other way when nothing is registered and nothing is identified.
You may object to the legitimate-interest processing. Leaving the box
unticked in the first-run window is that objection, made before anything is
sent.
If you are in the EU or UK, your data reaches Korea under an adequacy
decision — the European Commission’s decision for the Republic of Korea of
17 December 2021, and the United Kingdom’s adequacy regulations of 19 December
2022. No further transfer safeguards are required. Norway is in the EEA, so the
weather requests are not a third-country transfer at all.
A Korean version of this notice is published alongside it as PRIVACY.ko.md.
For users in Korea, the Korean version prevails where the two differ.
개인정보 처리방침
Small Commander — 제1판, 2026년 8월 18일 시행.
주식회사 딥온(Deep-On Inc., deepon.kr)이 Small Commander를 만듭니다. 이 문서는
이 앱이 무엇을, 언제, 누구에게 보내는지 적습니다. 앱이 하는 일이 적어서
문서도 짧고, 하는 일은 빠짐없이 적었습니다.
연락은 모두 [email protected] 으로 받습니다. 「개인정보 보호법」이 요구하는
연락처로 전화번호 대신 전자우편을 두는 것은 딥온의 다른 서비스(ChargePark)가
이미 쓰고 있는 방식과 같습니다.
요약
Small Commander는 계정이 필요 없습니다. 사용자가 직접 지정한 서버 외에는
인터넷 없이도 온전히 동작합니다. 분석 도구, 크래시 리포터, 광고 식별자,
서드파티 SDK가 하나도 없습니다 — 애초에 이 앱에는 외부 코드가 들어 있지
않습니다.
1. 이 맥을 떠나는 것 전부
항목
시점
받는 곳
중단 방법
이메일 주소, 앱 버전, 두 입력 위치 중 어디였는지
첫 실행 창이나 “무료 키” 시트에 직접 입력했을 때만
딥온
입력하지 않으면 됩니다. 건너뛰면 아무것도 남지 않습니다
설치 수 1건: 앱 버전, macOS 버전·빌드, 그 외 없음. 식별자가 없습니다 — 계정도, 기기 ID도, 이후 실행과 연결할 무엇도 없습니다. 다만 모든 웹 요청이 그렇듯 접속 IP는 드러납니다
첫 실행 시 1회, 설명 창에서 직접 체크하셨을 때만 — 기본값은 체크 해제입니다
딥온
그대로 두시면 됩니다
좌표 (소수점 4자리, 약 10m). 이 요청도 상대에게 IP를 드러냅니다
날씨 배너를 켠 동안에만, 최대 15분에 1회
api.met.no — 노르웨이 기상청
설정에서 날씨를 끄기
입력한 도시명
날씨를 도시로 지정할 때
macOS 내장 지오코더를 통해 Apple
끄기 또는 “현재 위치” 사용
사용자가 지시한 것
서버를 탐색·복사하거나 명령을 실행할 때
사용자가 직접 고른 서버
—
하나가 더 가능하지만 꺼져 있습니다: 무료 날씨 서비스 대신 유료 Open-Meteo 키가
설정되면 좌표가 노르웨이가 아니라 스위스의 OpenMeteo GmbH가 운영하는
customer-api.open-meteo.com으로 갑니다. 배포되는 빌드에는 그 키가 없고,
키가 없으면 그쪽과는 통신하지 않습니다.
이것이 전부입니다.
2. 이 맥을 절대 떠나지 않는 것
파일·폴더 이름. 서버 목록 캐시는 본인 계정만 읽을 수 있는 로컬 SQLite
파일입니다.
파일 내용. 어디에도 업로드하지 않습니다. 파일은 사용자가 지정한 곳
사이에서만 이동합니다.
비밀번호. macOS 키체인에 보관합니다. 파일에 쓰지 않고, 명령줄에 넣지
않으며, 환경변수에도 담지 않습니다.
SSH 설정. 호스트 목록을 보여주기 위해 ~/.ssh/config를 읽습니다.
어디에도 보내지 않습니다.
3. 국외 이전
위 표의 두 항목이 국외로 나갑니다.
이전받는 자
국가
항목
목적
시점·방법
보유기간
Norwegian Meteorological Institute
노르웨이
좌표(4자리), IP
해당 위치의 예보 회신
날씨 사용 중 HTTPS 전송
딥온은 보관하지 않음
Apple Inc.
미국 등
입력한 도시명
지명을 좌표로 변환
macOS 지오코더 호출
딥온은 보관하지 않음
둘 다 날씨 배너를 켰을 때만 발생하며, 설정에서 끄면 중단됩니다. 딥온은 이
두 요청을 중계하거나 수신하지 않습니다 — 사용자의 맥에서 곧바로 나갑니다.
4. 처리 목적과 항목
목적
항목
근거
요청한 체험판 키·릴리스 소식 발송
이메일 주소
정보주체의 동의 (입력 행위)
설치 규모 파악
식별자 없는 설치 건수, 접속 IP
앱 내 사전 고지 후 선택적 수집 (체크 해제 가능)
날씨 배너 표시
좌표 또는 도시명
정보주체의 선택 (기본값은 꺼짐)
5. 위치정보
⚠️ 준법 확인 필요. 아래는 이 앱이 실제로 하는 일을 「위치정보의 보호 및
이용 등에 관한 법률」의 항목에 맞춰 적은 것입니다. 다만 이 앱의 동작이
위치기반서비스에 해당하는지 자체가 확인 대상입니다 — 좌표가 딥온 서버를
거치지 않고 사용자의 맥에서 노르웨이 기상청으로 곧바로 나가기 때문입니다.
(딥온이 위치정보서비스 신고사업자인 것과는 별개입니다. 의무는 신고 여부가
아니라 실제 행위에 붙습니다.)
수집 목적 날씨 배너에 표시할 예보를 고르기 위해서입니다. 그 외 목적으로는
쓰지 않습니다.
수집 시점 설정에서 “현재 위치”를 직접 고르셨을 때만 수집합니다. 기본값은
꺼짐이며, 도시를 직접 입력하거나 끄기를 고르시면 위치는 전혀 사용되지 않습니다.
macOS가 먼저 권한을 묻습니다.
수집 항목 위도·경도 (소수점 4자리로 절단, 약 10m 정밀도).
보유·이용 기간 좌표는 예보를 받아오는 즉시 목적을 다하며, 다음 조회를 위해
이 맥에만 저장됩니다. 딥온은 위치정보를 수신하지도 저장하지도 않습니다.
제3자 제공 예보를 받기 위해 노르웨이 기상청(api.met.no)에 좌표가 전달됩니다.
이 전달은 사용자의 맥에서 직접 이루어지며 딥온 서버를 거치지 않습니다.
(3항 국외 이전 표 참조)
동의 철회 · 이용 중단 설정에서 날씨를 끄기로 바꾸시면 즉시 중단되며,
저장된 좌표도 함께 지워집니다. macOS 시스템 설정 ▸ 개인정보 보호 및 보안 ▸ 위치
서비스에서 권한 자체를 회수하실 수도 있습니다.
8세 이하 아동 등의 보호 이 앱은 개발자용 도구로 8세 이하 아동을 대상으로
하지 않으며, 보호의무자의 동의를 전제로 한 위치정보 수집 기능을 제공하지
않습니다.
이 문서는 영문본(PRIVACY.md)의 한국어판입니다. 해석에 차이가 있을 경우
한국 내 이용자에 대해서는 본 한국어판을 우선합니다.
Third-party notices
Small Commander — draft of 2026-08-17.
Small Commander contains no third-party source code. Package.swift
declares no external dependencies; everything it does is written for it or
provided by macOS.
Weather data from the Norwegian Meteorological Institute (MET Norway),
licensed CC BY 4.0.
CC BY 4.0 also asks that changes be indicated: Small Commander groups their
detailed weather symbols into nine plain conditions for display, and rounds
temperatures to whole degrees. The forecast values themselves are not altered.
This credit is shown in Settings next to the weather options, with the licence
as a link and the changes named; the weather card itself carries a short
“MET Norway” credit, which CC BY 4.0 §3(a)(2) permits when the full statement
is a click away.
MET also ask that clients cache and respect the Expires header rather than
re-asking. Small Commander polls at most once every fifteen minutes and uses
URLSession’s default cache; whether that satisfies the header in every case
has not been measured, and it is on the list to check. Their terms also
require an identifying User-Agent and a modest request rate; Small Commander
sends SmallCommander/1.0 (deepon.kr; [email protected]), asks about once
every fifteen minutes, and truncates coordinates to four decimals as they ask.
Their limit of twenty requests a second is measured per application rather than
per copy of it.
If a paid Open-Meteo key is configured as a fallback, that data is also CC BY
4.0 and the credit line changes to say so.
SF Symbols — Apple
The weather and toolbar icons are SF Symbols, used as interface elements in an
application for Apple platforms, which is what Apple’s licence permits. They
are drawn in a single colour, as template images are meant to be; their shapes
are not altered.
macOS frameworks
AppKit, Foundation, CoreLocation, Security and SQLite are part of macOS and
used under Apple’s developer agreement.
The tools it drives
Small Commander runs /usr/bin/ssh, /usr/bin/tar, /bin/sh, /bin/cat and
/bin/cp, all of which ship with macOS, and uses bash, perl, find or
PowerShell on whatever server you connect to. It bundles none of them.