Privacy

Last updated: July 5, 2026 · What jcode sends, what it never sends, and how to turn it off.

The short version: your code and your conversations stay between you and your model provider. Jcode is a local tool. Our servers only ever see the narrow things listed below, each of which can be turned off.

Telemetry

Jcode sends anonymous usage events (install, session start, turn counts, onboarding steps, crash reports) keyed by a random telemetry_id. Events contain version, platform, and coarse feature-usage signals. They never contain your prompts, code, file contents, or file paths. Raw events are retained for roughly 90 days in a time-series store; aggregate rollups are kept longer. The worker code is public in the jcode repository.

Opt out anytime: export JCODE_NO_TELEMETRY=1, or decline during onboarding.

Subscription API

If you buy a jcode subscription, requests you make through it (prompts, tool results, model responses) pass through our router to the upstream model provider to serve your request. We store metering records (token counts, model, cost, timestamps) for billing, plus your account email and Stripe billing state. We do not store your prompt or response content. Using your own API keys instead means none of your traffic touches our servers at all.

Sponsored discovery

Off by default. If you enable it ([sponsors] in ~/.jcode/config.toml), the agent can call discover_tools, which sends our server the tool category, a short capability query, and a generic reason string. The agent is instructed to never include private information or session content in these fields, and our server truncates and stores only those fields, for transparency and sponsor billing. What sponsored discovery is: /sponsored-discovery.

Website

This site uses a small self-hosted beacon (beacon.js) for page-view counts. No third-party trackers, no advertising cookies.

What we never collect

• Your source code, file contents, or file paths (outside subscription API traffic you send us).
• Your conversations with models when you use your own API keys.
• Your API keys for other providers. They stay on your machine.

Requests and deletion

Email [email protected] to ask what we hold for your account or telemetry ID, or to have it deleted.