Privacy

Who this covers

This notice covers two surfaces operated by the Oragent maintainers: the marketing website at oragent.top (and any mirror such as oragent.org), and the Oragent software itself, distributed via PyPI as oragent and via GitHub Releases as Oragent.app for macOS. It does not cover third-party services you choose to use through Oragent (Claude, OpenAI, your shell, your editor) — those have their own privacy notices.

Data we don't collect

We do not run a backend that receives your data. Specifically, we do not collect, store, or transmit:

• Accounts, emails, names, or any other identifier — Oragent has no signup.
• Session replay, mouse-movement recording, keystroke logging, or any other behavioral reconstruction on the website. The site does count anonymous, cookieless page views and link clicks — see Website analytics for the full description.
• Tracking cookies set by us on the website. The analytics pixel runs in memory-only mode and does not write any cookie. Your browser may still receive standard infrastructure cookies from our hosting provider; see section 4.
• Telemetry from the TUI: your keystrokes, command history, file paths, tmux pane contents, AI prompts and responses, screenshots, and API keys. None of these are transmitted by Oragent.
• Crash reports or error traces. Oragent does not phone home when it crashes; logs stay in ~/.oragent/ on your machine.

Network requests Oragent makes

The Oragent TUI's auto-updater periodically makes read-only HTTPS GET requests to two public endpoints to discover whether a newer release is available:

• https://oragent-ai.github.io/updates/manifest.json — the release manifest, hosted on GitHub Pages.
• https://pypi.org/pypi/oragent/json — public PyPI metadata, used as a fallback version source.

These requests carry only the standard HTTP envelope: your IP address (as seen by the destination), and a User-Agent string identifying the updater (oragent-updater/1 (+https://github.com/oragent-ai/oragent)). They contain no body, no identifiers, no usage data. We do not operate the servers that receive them. Those endpoints are run by GitHub and the Python Software Foundation, which may log standard HTTP request metadata under their own privacy notices — see GitHub's privacy statement and the PSF privacy notice.

The macOS Oragent.app build uses Sparkle for updates instead of the Python updater. Sparkle issues the same kind of read-only request to the appcast URL bundled with the app.

There is no built-in opt-out flag today. If you need to suppress the check entirely, block those two hosts at your firewall or DNS layer; Oragent will continue to function offline. We may add an explicit toggle in a future release.

Website analytics

The marketing site at oragent.org (and the oragent.top mirror) is a mostly-static page served through Cloudflare. It uses PostHog Cloud EU (hosted in Frankfurt) to count anonymous page views and link clicks. The goal is operational, not commercial: we want to know how many people reach the site, where they come from, and whether the /support page is clear enough for the rare visitor who wants to contribute. We do not:

• Set cookies. The analytics client runs in persistence: 'memory' mode — nothing is written to localStorage or document.cookie.
• Record your IP address or precise geolocation. Country-level inference (derived from the request, never stored) is the only geographic signal kept.
• Capture session replays, mouse paths, scroll heatmaps, or keystrokes.
• Identify you. There is no identify() call, no login, no email collection, and no cross-site stitching.
• Embed third-party advertising pixels or fingerprinting code.

Browsers with Do-Not-Track enabled are excluded automatically. To opt out manually, install any tracking blocker (uBlock Origin, Privacy Badger). Analytics data lives in the EU and is purged after twelve months.

Cloudflare's edge may set technical cookies and log standard request metadata (IP, User-Agent, timestamp) for security and abuse-prevention purposes; see Cloudflare's privacy policy for details. We do not access those logs to identify visitors.

External links from the site go to GitHub, PyPI, the GitHub Releases CDN, Stripe (for contribution checkout), and a small set of authoritative references. Once you follow one, you are on the destination service's terms. The Stripe checkout flow for /support is described in the terms and refunds policies.

Third-party platforms

Installing or downloading Oragent involves third-party services we do not control:

• PyPI — when you run pipx install oragent, the request goes directly to the Python Software Foundation's package index, not to us.
• GitHub — cloning, browsing source, downloading Oragent.app, or filing an issue all happen on GitHub's infrastructure.
• Apple — the macOS build is signed and notarized; macOS may report Gatekeeper / notarization checks to Apple on first launch under Apple's standard practices.
• AI providers and your shell — whichever coding agents you run inside Oragent (Claude Code, Codex, etc.) and whichever local commands you execute have their own data flows. Oragent does not proxy, store, or modify those flows.

Children's data

Oragent is a professional developer tool. It is not directed at, and not designed for, anyone under 16. If you are a parent or guardian and discover that a minor in your care has installed it, uninstall it; we do not knowingly collect any data about anyone, including minors.

Changes to this notice

This page is versioned in the project's source tree. Material changes will be reflected by an updated "Last updated" date at the top, and significant changes may be called out in the Updates log. Continued use after a change takes effect constitutes acceptance.

Contact

Oragent is maintained by an independent developer, not a company. For privacy questions, open an issue at github.com/oragent-ai/oragent/issues. If your request is sensitive, mark the issue clearly and we will move to a private channel before continuing.