// PRIVACY

Privacy Policy

Last updated: June 12, 2026

The short version: agentjail is an open-source tool that runs on your machine. It collects anonymous, opt-out usage telemetry to help us improve the product - never your code, commands, or policies. This page spells out the details in plain English.

The agentjail tool

The CLI and daemon run entirely on your machine and evaluate tool calls locally. agentjail collects anonymous, opt-out usage statistics via PostHog to help us understand which features people use and how the daemon performs in the field. Full details are in the telemetry reference.

The following event types may be sent:

  • session_start - emitted when the daemon starts (OS, arch, install method)
  • feature_used - a CLI command was run (command enum, agent enums - never arguments)
  • decision_rollup - aggregated policy decision counts for a time window (counts only, never payload)
  • perf_rollup - aggregated daemon latency for a time window (p50/p95 ms)
  • policy_config - your policy configuration at daemon start: custom rule count and disabled rule IDs
  • install - emitted once, immediately after a successful install
  • uninstall - emitted immediately before teardown
  • update - emitted when you run agentjail update
  • fail_open - emitted when the hook fails open due to a daemon fault (reason enum, never tool input)
  • heartbeat - at most once per ~24h on a CLI run (OS, version currency)
  • feedback - only when you explicitly run agentjail feedback

Every event carries only a random anonymous ID (generated once on your machine), a per-event deduplication UUID, and the agentjail version. The following are never sent: file paths, command text, repository names or URLs, environment variable contents, MCP server names, policy file contents, IP addresses, hostnames, usernames, or any hardware identifier.

Opting out of tool telemetry

Telemetry is on by default and off automatically in CI environments. To disable it permanently:

  • Run agentjail telemetry disable
  • Or set AGENTJAIL_SEND_ANONYMOUS_USAGE_STATS=false in your environment

Run agentjail telemetry view to see exactly what is currently queued before anything is sent. See the full telemetry reference for all commands and the complete data contract.

This website

agentjail.io is a static site. To understand traffic at an aggregate level we use:

  • Google Analytics (GA4) - this sets first-party cookies and collects standard usage data such as pages viewed, approximate (IP-derived) location, and device and browser type. We use it only to see how the site is used in aggregate.

Standard server logs (IP address, browser type, page requested) may also be kept briefly for security and debugging. We don't show ads or sell your data.

Opting out of website analytics

Google Analytics does not automatically respond to Global Privacy Control or "Do Not Track" signals. To opt out, install Google's Analytics Opt-out Browser Add-on, or block analytics with your browser's privacy settings or a content blocker.

What we don't do

We don't sell your data, show ads, or build our own profiles on you. There's no account to create. Data collected through Google Analytics is also processed by Google under its own privacy policy.

Your rights

You can browse without giving us anything. If you've somehow sent us personal data and want it accessed or deleted, just ask. See Contact below.

Changes

If this policy changes, we'll update the date above. Material changes will be noted in the repository's history, so you can always see exactly what changed.

Contact

Questions about privacy? Open an issue on GitHub or read our security policy.