openrelay/PRIVACY.md

Privacy Policy

Overview

OpenRelay is a local proxy tool that runs entirely on your machine. Your privacy is fundamental to its design.

Credential Handling

OpenRelay reads authentication credentials (cookies, tokens, API keys) from AI desktop applications you have already installed and logged into. These credentials are:

• Read-only — OpenRelay reads but never modifies your stored credentials
• In-memory only — credentials are held in process memory during runtime, never written to OpenRelay's own files
• Never transmitted — credentials are only used to authenticate requests directly to the original AI service backends, never sent to OpenRelay servers or any third party

Data Handling

What stays on your machine

• All authentication credentials — read from your local filesystem, used in-memory only
• All AI conversations — pass directly from your client to the AI backend; OpenRelay does not store, log, or inspect message content
• Configuration data — stored locally at ~/.openrelay/

What is never collected

• Message content is never logged, stored, or analyzed
• No usage telemetry, analytics, or behavioral data is collected
• Your credentials are never sent to OpenRelay servers

Network Connections

OpenRelay makes the following network connections:

1. AI service backends (e.g., api.anthropic.com, amazonaws.com, server.codeium.com) — to forward your requests using your own credentials
2. License verification server (license.limitlessmeto.com, hosted on Cloudflare) — periodic license status check
   • Sent: anonymous device identifier and license token
   • NOT sent: credentials, conversation content, usage details, or personal information
   • Purpose: verify license tier (Free / Pro) and active device count
3. GitHub Releases API (optional) — to check for software updates

Local Logging

• The openrelay.log file may contain request metadata (timestamps, model names, token counts) for debugging purposes
• Log files never contain message content, credentials, or personal information
• Logs are stored locally and are never transmitted

Data Deletion

To completely remove all OpenRelay data:

rm -rf ~/.openrelay/

Contact

For privacy-related questions, please open an issue on GitHub.