Policy / effective 2026-08-28

Your files stay on your machine

The CLI has no telemetry, accounts, or network client.

CLI data

The CLI reads supported configuration files from paths you choose. It writes a baseline only when you run snapshot.

Reports contain secret identifiers, recipient names, source paths, and injection paths. Reports do not contain secret values. Use --redact before sharing identifiers.

Website data

The website has no analytics, cookies, accounts, forms, or third-party scripts. The demo uses bundled text and stores nothing.

Network access

The CLI does not make network requests. The website loads its files from this origin.

Contact

Report a privacy issue through the project’s GitHub issue tracker (external).