Skip to main content

Privacy

Everything works offline​

Discovery, repository inspection and the gateway are entirely local. No account, no network, no telemetry. This is the default state, not a hardened configuration you have to assemble.

Telemetry is off by default​

telemetry.enabled: false. Turning it on is a deliberate act.

Credential values are never read​

Any credential-shaped value in a discovered server's arguments or URL is replaced with [REDACTED] before it leaves the process. The flag or parameter name survives — "this server holds an API key" is the useful signal — and the value is stripped.

Never read, never printed, never logged, never stored.

Cloud sync is explicit​

unveilr cloud sync --dry-run

Shows exactly what would be uploaded, and what never will be.

Never uploaded, under any configuration:

  • secret values
  • source code
  • prompts
  • environment variable values
  • file contents

Why the dry run exists​

Because "trust us" is not a privacy policy. The dry run is the mechanism that lets you check the claim on this page against the tool's actual behaviour, before any data moves, on your own configuration.

If the two ever disagree, the tool is wrong and the discrepancy is a security issue — see SECURITY.md.