Privacy, without a footnote.

Workspace Sandbox Manifest does not collect, transmit, or sell personal data. The CLI has no telemetry and makes no network request of its own.

Website

The policy compiler runs in your browser. Manifest and command text are not uploaded, logged, or stored in local storage. The site sets no cookies and loads no third-party scripts, fonts, or analytics.

CLI

The CLI reads the manifest and paths you specify locally. A network probe attempts one short TCP connection inside the selected sandbox solely to verify denial; no application data is sent.

Hosting logs

Infrastructure providers may retain ordinary security and request logs. This project does not receive or combine those logs into user profiles.

Contact

Open a privacy issue in the project issue tracker.