Last updated June 2, 2026.
The short version: the desktop app collects nothing. This page covers what the website and paid services touch.
No telemetry, no account, no phone-home. The binary makes no network calls except the traffic you point it at. Your captures live in a local SQLite file and never leave your machine unless you buy Hosted and opt in per scope.
Static pages, no third-party analytics, no ad trackers. Server logs keep IP and user-agent for 14 days to catch abuse, then they're deleted.
Open a private GitHub Security Advisory to see, export, or delete anything we hold. We reply within 30 days, usually the same week.