Privacy — Actualis

There are two separate things here: the Actualis application, and this website. They are covered separately because they behave very differently.

The Actualis application

Actualis collects nothing and transmits nothing. It runs entirely on your machine, reads your existing agent transcripts read-only, and makes no outbound network connection of any kind.

There is no account, no sign-in and no licence check.
There is no telemetry, crash reporting or usage analytics — none to disable, because none exists.
The command-line tool is written against the Python standard library and imports no HTTP client or socket library at all.
Detected credentials are fingerprinted rather than stored, and are never written out in full.
Nothing is shared unless you deliberately run the share command, which redacts by default and shows you what it will disclose first.

You do not have to take this on faith. The source is AGPL-3.0 and the entire CLI is one auditable file.

This website

The site is static and sets no cookies of its own. It runs no analytics and no advertising or tracking scripts.

What	Why	Who
Server request logs, including IP address	Serving the site and protecting it from abuse. Retained briefly by the host.	Vercel
Web fonts	Inter and IBM Plex Mono are loaded from Google Fonts, which sees the request.	Google Fonts
Contact form submissions	Only what you type: your name, email, message. Used to reply to you.	CirqleSync
Payments	Handled entirely by GitHub or Stripe. This site never sees card details.	GitHub, Stripe

The contact form includes an invisible bot check and rate limiting.

Your data

To ask what we hold from a contact form submission, to correct it, or to have it deleted, use the contact form or the issue tracker. Since the application collects nothing, there is nothing held on that side to request.

Changes

If this policy changes materially, the change will be visible in the website’s public git history rather than announced only here.

Last updated 23 August 2026.