Policy / 2026-08-28

Privacy

Secret Exposure Path is designed not to receive your data.

CLI

The CLI performs all scanning on your machine. It makes no network requests, includes no telemetry, and does not write detected values to reports or persistent storage. Candidate values exist in process memory only for the duration of a scan. Reports contain a truncated SHA-256 fingerprint and file or stream locations.

Website and demo

The website has no analytics, cookies, accounts, or third-party runtime resources. Demo input remains in the current browser tab and is neither persisted nor transmitted. Closing or reloading the page clears it.

Hosting

Like any website host, infrastructure may process ordinary request metadata such as IP address, path, and user agent for short-lived security and operations logs. The product itself does not access or combine those logs.

Questions

Open a privacy issue in the project’s public issue tracker.