// LEGAL
Third-party software & licenses
Cypherrum redistributes a small set of third-party components. They are listed below with their license, what we use them for, and a link to the upstream project.
In the Cypherrum desktop app
The components in this section are part of the binaries you install on your machine.
-
Dokany kernel driver
MITUsed for: Provides the kernel-mode mount that exposes an unlocked vault as a Windows drive letter.
Bundled as: Windows installer only. Files: dokan2.sys (kernel driver), dokan2.inf (install metadata), dokan2.cat (signed catalog), dokanctl.exe (driver control utility), license.mit.txt. All under MIT, copied to C:\Program Files\Cypherrum\dokan\ at install time.
We deliberately do NOT bundle the user-space dokan2.dll. That library is LGPL-2.1; Cypherrum has its own Go-native client that talks to the MIT-licensed kernel driver directly via the documented Windows driver protocol. Only the kernel-driver components touch the redistribution, and they are all MIT-licensed.
-
cypherrum-relay
GPL-3.0Used for: TURN/STUN fallback for the mesh sharing protocol when peer-to-peer connectivity is blocked by hostile NATs.
Bundled as: Distributed separately from the desktop app. Run optionally by self-hosters; a Logiqum-operated relay is also reachable for fallback connectivity.
In this website
Components your browser loads when you visit cypherrum.com.
-
Inter Variable
SIL Open Font License 1.1Used for: Body and headline typeface.
Bundled as: WOFF2 subset, loaded on every page.
-
JetBrains Mono Variable
SIL Open Font License 1.1Used for: Monospace typeface for code blocks, eyebrows, and labels.
Bundled as: WOFF2 subset, loaded for code/monospace text.
-
Cloudflare Web Analytics beacon
Proprietary — Cloudflare Inc.Used for: Anonymous page-view and Core Web Vitals telemetry. No cookies, no cross-site tracking, no fingerprinting.
Bundled as: Loaded as a script tag from static.cloudflareinsights.com on every page.
Open-source dependencies (Go modules, etc.)
Cypherrum's desktop binaries and relay are written in Go and statically linked against a number of MIT-, BSD-, and Apache-2.0-licensed Go modules. None are copyleft (no LGPL/GPL/AGPL dependencies in the dependency graph as of 2026-06-13).
A machine-readable list of every module in the build, with its license SPDX identifier, is generated at release time. Request the manifest for a specific version at legal@cypherrum.com.
Cypherrum itself
The Cypherrum desktop app is closed source — license holders receive signed binaries, not source code. The cypherrum-relay component (TURN/STUN fallback) is published under GPL-3.0 at cypherrum-releases. The on-disk vault format is documented for independent implementation in the format specification — anyone can write a compatible reader without our source.