Policy / 2026-08-27
Privacy by construction.
Secret Sync Preflight does not need your secrets, your identity, or a server-side account.
CLI data
The CLI reads local key-only manifests and exports. It makes no network requests, uses no telemetry, and writes nothing unless you explicitly provide --report. Reports can contain key names, which may be sensitive; store and share them as restricted build artifacts.
Browser demo
The demo runs entirely in your browser. Input is held in memory for the current tab, is not uploaded, and is not written to cookies or local storage. Reloading discards it.
Site operation
This static site contains no analytics, advertising, tracking pixels, third-party scripts, or remote fonts. The hosting platform may process ordinary request metadata such as IP address and user agent for short-lived security and operational logs.
Your choices
You can use the CLI fully offline. Do not paste values into the demo; assignments are rejected. If deployment operators later add a privacy-preserving page counter, this policy must be updated before collection begins.