🔒 Lode Privacy Policy / 隱私權政策

Effective / 生效日期：2026 年 5 月 17 日（May 17, 2026）
← Back to Lode home · 📖 User Guide · 📊 vs Competitors · 📜 Terms

🟢 Privacy at a glance / 一目了然版

🇺🇸 English version (full)

1. Data Lode collects

Lode collects or processes the following data only when you explicitly enable the corresponding feature:

1.1 Anthropic API key (required for AI Summarize)

• Stored in: macOS Keychain (service: lode.api-key.anthropic). Protected by your macOS user login; never written to plain-text settings files.
• Used to: call Anthropic's /v1/messages API for diff / document summarisation.
• We never transmit this key to any RexCode-owned server. We do not operate any servers.

1.2 Diff / document content (when you click ✨ Summarize)

• Triggered by: pressing the Sparkles button in File Diff, Folder Diff, Git Viewer, or Docx Viewer.
• Sent to: Anthropic's /v1/messages endpoint over HTTPS.
• Not cached locally on Lode's side. Anthropic's data policy governs their copy. See anthropic.com/privacy.

1.3 Crash reports (planned — not yet shipped)

• Current status: as of v1.0, Lode ships without any crash reporting. Lode collects zero crash telemetry until this feature lands in a future release.
• When shipped: will be opt-in, OFF by default, toggleable in Settings → Privacy. If enabled, will send Lode version + macOS version + stack trace (plus your typed feedback when you use the Feedback button) to Sentry (sentry.io/privacy). This page will be updated with the effective date when the feature ships.

1.4 Local workspace state

• Stored at: ~/Library/Application Support/app.rexcode.lode/workspace.json
• Contains: paths to root folders you opened, Viewer / Diff state, your preferences (zoom level, theme, hotkey overrides, AI monthly budget, etc.).
• Never leaves your machine.

1.5 License + trial state

• Stored at: ~/Library/Application Support/app.rexcode.lode/license.json
• Contains: first-launch timestamp (drives the 30-day trial), license key (if activated), and buyer email decoded from your purchase payload.
• Never leaves your machine.

2. What Lode does NOT collect

Things Lode explicitly does not do:

• ❌ No telemetry, analytics, or usage metrics — none of any kind.
• ❌ No cookies, ad IDs, or device fingerprinting.
• ❌ No file contents — except when you explicitly trigger AI Summarize (§1.2).
• ❌ No file paths — beyond workspace.json recording which roots you opened, no path information leaves your machine.
• ❌ No keystrokes, mouse traces, or session recordings.
• ❌ No outbound network traffic except to Anthropic (when AI Summarize fires). The future opt-in Sentry crash reporter will be the only other outbound destination once shipped.
• ❌ No background phone-home, update polling, or licence-check pings. Trial state is verified entirely offline against the local license.json.

3. Third-party data processors

4. Children's privacy (COPPA)

Lode is not designed for or targeted at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, please open a GitHub Issue and we will remove it promptly.

5. GDPR rights (EU users)

Because all Lode-managed data sits on your local machine, your GDPR rights to access, correct, delete, and port your data can be exercised directly by deleting or copying the local files:

# Inspect everything Lode stores about you
ls -la ~/Library/Application\ Support/app.rexcode.lode/

# Wipe all Lode-managed local data
rm -rf ~/Library/Application\ Support/app.rexcode.lode/

For Anthropic-side data (the diff content you sent for summarisation), contact Anthropic directly to exercise your rights against their copies.

6. CCPA rights (California users)

• We do not sell your personal information.
• We do not share data with third parties beyond what's described in §3 above.

7. Data security

• Local files are protected by your macOS user-account permissions; by default they're readable only by the user account that runs Lode.
• API key transmission uses HTTPS (TLS) to api.anthropic.com.
• Lode has no servers. There is no centralised store of user data to be breached — nothing to attack, because nothing is collected centrally.
• We recommend setting a monthly usage cap on your Anthropic account at console.anthropic.com as a defense-in-depth measure independent of Lode's local budget cap.

8. Policy changes

Material changes to this policy will be announced on the Lode home page + the rex4ssd/lode-releases repository, and reflected in the "Effective date" at the top of this page. We recommend re-reading after major Lode versions.

9. Contact

• Email: [email protected]
• GitHub Issues: github.com/rex4ssd/lode-releases/issues
• In-app: TopBar ? icon → Feedback modal

🇹🇼 中文版（完整）

1. Lode 搜集的資料

Lode 只在使用者明確啟用對應功能時，才會搜集 / 處理以下資料：

1.1 Anthropic API key（AI Summarize 功能必要）

• 儲存位置：macOS Keychain（service 名稱：lode.api-key.anthropic），受 macOS 使用者登入保護，絕不寫入明文設定檔。
• 用途：呼叫 Anthropic /v1/messages API 取得 diff / 文件摘要。
• 絕不傳送這個 key 到任何 RexCode 自有伺服器 — 因為我們沒有伺服器。

1.2 Diff / 文件內容（AI Summarize 觸發時）

• 觸發：在 File Diff / Folder Diff / Git Viewer / Docx Viewer 按下 ✨ Sparkles 按鈕。
• 流向：透過 HTTPS 傳送到 Anthropic /v1/messages。
• Lode 本機不快取請求 body。Anthropic 對其副本的處理請見其隱私政策。

1.3 當機回報（規劃中 — 尚未上線）

• 目前狀態：v1.0 不含任何當機回報機制。Lode 在此功能上線前不收集任何當機 telemetry。
• 未來上線時：將為 opt-in、預設關閉，於 Settings → Privacy 切換。啟用後會送 Lode 版本、macOS 版本、stack trace（如使用 Feedback button 也含你寫的文字）到 Sentry（sentry.io/privacy）。功能上線時將更新本頁面生效日期。

1.4 本機工作空間狀態

• 儲存位置：本機 ~/Library/Application Support/app.rexcode.lode/workspace.json
• 內容：開啟的 root 資料夾路徑、Viewer / Diff state、使用者偏好（zoom level、theme、自訂快捷鍵、AI 月度 budget 等）。
• 永遠不離開本機。

1.5 License + 試用狀態

• 儲存位置：本機 ~/Library/Application Support/app.rexcode.lode/license.json
• 內容：首次啟動時間（30 天 trial 用）、license key（如已啟用付費版）、買家 email（從購買 payload 解碼）。
• 永遠不離開本機。

2. Lode 不搜集的資料

明確列出 Lode 不會做的事：

• ❌ 無 telemetry / analytics / usage metrics — 任何形式都沒有。
• ❌ 無 cookies / Ad IDs / device fingerprinting。
• ❌ 不蒐集檔案內容 — 除非使用者明確透過 AI Summarize 觸發（見 §1.2）。
• ❌ 不蒐集檔案路徑 — 除了 workspace.json 紀錄你開過哪些 root，沒有任何 path 離開機器。
• ❌ 無鍵盤紀錄 / 滑鼠軌跡 / session recording。
• ❌ 無對外網路請求 — 除了 Anthropic（AI 觸發時）。未來 opt-in Sentry crash reporter 上線後將是另一個唯一對外連線目的地。
• ❌ 無背景 phone-home / update polling / license-check ping。試用狀態完全離線驗證，只看本機 license.json。

3. 第三方資料處理者

4. 兒童隱私（COPPA）

Lode 不針對 13 歲以下兒童設計，也不會在知情情況下搜集其資料。如發現相關情形，請開 GitHub Issue 通知我們，將儘速刪除。

5. GDPR 權利（歐盟使用者）

由於所有 Lode 管理的資料都儲存在你的本機，GDPR 的存取 / 更正 / 刪除 / 移轉權利可以直接透過操作本機檔案行使：

# 查看 Lode 儲存了你的什麼資料
ls -la ~/Library/Application\ Support/app.rexcode.lode/

# 完全清除 Lode 所有本機資料
rm -rf ~/Library/Application\ Support/app.rexcode.lode/

Anthropic 端的資料（你送出去做摘要的 diff 內容）請直接聯絡 Anthropic 行使對其副本的權利。

6. CCPA 權利（加州使用者）

• 我們不販售你的個人資料。
• 我們不與第三方分享資料，除上述 §3 表所列範圍。

7. 資料安全

• 本機檔案受 macOS user-account permission 保護；預設只有執行 Lode 的使用者帳號可讀。
• API key 傳輸透過 HTTPS（TLS）送到 api.anthropic.com。
• Lode 沒有伺服器。無集中式的使用者資料庫可被外部攻破 — 因為根本沒有資料被集中蒐集。
• 建議在 console.anthropic.com 為你的 Anthropic 帳號設一個每月用量上限作為防禦縱深，獨立於 Lode 本機 budget cap。

8. 政策變更

如本政策有重大變更，會在 Lode 主頁 + rex4ssd/lode-releases repository 公告，並更新本頁面頂端的「生效日期」。每次 Lode 大版本後建議重讀一次。

9. 聯絡我們

• Email：[email protected]
• GitHub Issues：github.com/rex4ssd/lode-releases/issues
• In-app：TopBar 右上 ? icon → Feedback modal