What leaves your machine, and what doesn't

Your code and prompts

Your code, prompts, file paths and repository contents go to one place only: the model provider you set up, such as Anthropic, OpenAI or a local model. They travel directly from your machine to that provider, using your own key or subscription sign-in. Empryo has no server that sees, stores or relays them.

API keys and sign-in tokens are stored on your machine: in your operating system's keychain where one is available, otherwise in a local secrets file. They are only ever sent to the provider they belong to.

The anonymous usage ping

Release builds of Empryo send one small anonymous request when a session starts. It describes how the app is set up, not what you do with it: for example the model family and provider, the agent mode, the theme, your terminal type, your language, how you installed Empryo, and coarse counts of how often some features were used.

To turn it off, run /developer in the app and flip the toggle. You can also set "telemetry": false in your config, or set DO_NOT_TRACK=1 or EMPRYO_TELEMETRY=0 in your environment.

The ping never contains your prompts or the model's replies, file contents, file names or paths, repository or branch names, your working directory, hostname or username, API keys or tokens, custom model ids, or custom provider URLs. The /developer panel shows the exact field list.

Counting downloads and installs

When you click a download button, the site sends an anonymous +1 to a download counter. It carries no id and no other data.

Installs are counted the same way, so a download number can be compared with an install number. A release build reports a random install id generated on your machine, which app you are using, the app version, your operating system and your CPU architecture. A coarse country is derived from the IP address when the request arrives, and the IP address itself is not stored. Nothing about your code, your prompts or your work is part of it. Delete ~/.empryo/anon-id.json to reset the id.

This website is a static site served by Cloudflare. Cloudflare keeps standard request logs, as any hosting provider does. The site sets no tracking cookies and currently loads no analytics script. If we add one, it will be Cloudflare Web Analytics, which is cookieless and does not identify you, and this page will be updated first.

Feedback

When you send feedback from the app with /feedback, it sends the text you wrote, the category you picked, the app version, your operating system and which app you used. It is not linked to your install id. The contact field is optional and is used only to reply to you.

The browser extension

The Empryo browser extension lets the agent read and operate browser tabs when you ask it to. While it controls a tab, it reads that tab's accessibility tree and visible text, and it clicks, types and scrolls as your request needs.

That page content goes to two places only: the Empryo app on the same machine, and from there to the model provider you set up. There is no Empryo server in between. Nothing is sold, shared or used for advertising.

It only reads tabs you point it at, and only while it is controlling them. It does not read your browsing history, bookmarks or other tabs. Password fields are left out of screenshots, and typed secrets are not recorded. On your machine it stores two things: the tab groups it created and its connection status.

You can always tell when it is attached: Chrome shows its own banner, the toolbar icon shows a badge, and a strip appears across the page. Press Cmd/Ctrl+Shift+X to stop it immediately. If you remove the extension, nothing of it stays behind.

Data requests

There is no account to delete, because there are no accounts. The install count is tied only to the random id in ~/.empryo/anon-id.json. Delete that file and your install looks like a new one. For any other question, see the contact page.