You opened the privacy page. Almost nobody does.

The longer version. Still short.

Do I need an account?

No. There is no sign-up, no login and no “Continue with Google”. We would not know what to do with your email anyway.

Where does my code go?

Nowhere. It stays on the computer that holds the repository. The browser, the Mac app and, soon, your phone read it from there. Pairing gives each device its own key to that one computer, and nothing to us.

And the walkthroughs and comments?

Same computer, in Porcelain’s own folder, ~/.porcelain unless you choose another. Delete it and they are gone. We never had a copy to lose.

Analytics? Crash reports? One tiny pixel?

None in the app and none on this site. We genuinely do not know how many people read this page. If it is just you, hello.

Does it ever talk to the internet?

The Mac app asks GitHub whether a new version is out, and updating the server asks npm the same question. Those requests carry a version number, not your code.

What about working remotely?

You reach your own computer over your own network or your own Tailscale. There is no Porcelain server in the middle, because there is no Porcelain server.

And my agent?

Your agent is its own app with its own policy. Porcelain sends your prompts and code nowhere, but the agent may send what it reads to its provider. Read their privacy page too. You are clearly the kind of person who does.

This website?

Static pages. No cookies, no sign-in, no trackers. The host keeps the ordinary request logs any website has, and we do not look at them for fun.