Privacy Policy

Summary

ostk is local-first by custody: canonical project state remains on your filesystem, without requiring an ostk account or hosted control plane. Network activity depends on the providers and tools you configure. The website uses Plausible Analytics for aggregate page-view, tagged-event, outbound-link, and file-download counts without site cookies or cross-site profiles.

The Software

Canonical project state and context-page content are stored locally, normally under .ostk/. Provider credentials, signing keys, and external harness transcripts can live in platform-specific locations outside the project.

• Cloud-model requests send prompts and the context required for that request to the provider you configure.
• Web tools, downloads, updates, registrars, and outbound drivers contact the endpoints you invoke or configure.
• When Anthropic credentials are configured, anchored ostk-managed sessions can automatically attempt best-effort Anthropic Files uploads of drain snapshots and context pages for context efficiency and cross-host recovery. These copies are optional for correctness; the canonical local content remains on disk, and generic MCP context loads default to inline delivery.
• Audit, performance, and operational telemetry are written locally. The binary does not require a separate ostk analytics or crash-reporting service.

You can inspect and back up the local substrate directly. Removing it removes that local history; data already sent to a configured provider is governed by that provider's retention controls.

The Website (ostk.ai)

ostk.ai loads Plausible's tagged-events, outbound-links, and file-downloads analytics script. It is configured without site cookies or cross-site visitor profiles.

• Records aggregate page-view counts
• Records explicitly tagged interface events, such as selected call-to-action clicks
• Records outbound-link clicks and file-download events
• Does not use site cookies for analytics
• The site content itself is statically generated; the analytics script sends these measurements to Plausible

Third Parties

The website uses Plausible Analytics for aggregate page-view, tagged-event, outbound-link, and file-download measurement. The software sends data to third-party services only when a configured provider, tool, download, update, registrar, driver, or provider-backed context feature uses that service; the third party's own terms and privacy policy then apply.