Law & Compliance

Privacy

The shortest privacy policy you will read this year: we collect nothing, we sell nothing, there is nothing to leak.

🛡️
Zero by design, not by promise. This site is static HTML with no backend. Sonderr runs on your machine. There are no accounts, no cookies, no analytics, no telemetry — so there is no database holding your data in the first place.

1 · This website

  • No cookies. No banner because there is nothing to consent to.
  • No analytics. We don't count you, fingerprint you, or track you across the web.
  • No accounts, no forms that store anything. The old contact form and ticket system are gone. Email is the front door.
  • Hosting. The site is served by Vercel. Any CDN sees request metadata (like your IP) to deliver pages — that's their infrastructure, under their compliance rules. We never receive or store it.

2 · Sonderr (the product)

  • Runs on 127.0.0.1. Your prompts, workspace files, sessions and settings live on your machine. There is no Sonderr server and no account.
  • AI providers are your choice. With BYOK or Kilo Gateway, prompts are sent over HTTPS to the provider you picked — that's hosted AI, and the docs say exactly what leaves your machine (Models & providers →). The local Sonderr-v1 model runs entirely offline.
  • Update checks contact GitHub Releases over HTTPS. GitHub sees a normal request; Sonderr does not send your version, prompts, files, settings or credentials — the version comparison happens locally (Security →).
  • Secrets stay local. Credentials, wallet keys and config use owner-only file permissions under ~/.sonderr. We can't read them — there's no channel to us at all.

3 · What we never do

  • We don't sell data. Not anonymized, not "aggregated", not ever.
  • We don't collect data. No profiles, no ad IDs, no email lists.
  • We don't train models on your data. We have nothing to train on.
  • We don't embed trackers in the site or the product.

4 · When YOU contact us

Email goes from your mail provider to ours (Google, for both addresses) — that conversation sits in those inboxes and is handled like any private correspondence. We don't export, mine, or add you to any list.

5 · GDPR, in one honest paragraph

Because we hold no personal data, there is generally nothing to access, correct, export, or erase — the zero-collection design is the strongest data protection we can offer. If you believe we hold something of yours anyway, email danipostma123@gmail.com with subject "Data request" and we will delete it and confirm in writing. We would rather over-delete than keep anything.

6 · Changes

If this page ever has to change, the change lands here with a note in the changelog. The zero-collection, zero-selling commitments are not up for negotiation.