Legal

Privacy

Orbit is local-first. Your source code, projects, terminal, and AI conversations are yours and stay on your machine. The desktop app collects no telemetry; this page explains what leaves your machine when you use Orbit and the small amount of analytics this website uses.

Last updated October 14, 2026

The short version

  • The desktop app collects no telemetry — no analytics client, no installation or session identifier, and no usage reporting.
  • Orbit never intentionally collects your source code, file names, terminal contents, prompts, conversations, or credentials.
  • This website uses self-hosted, cookie-free analytics loaded only in production.
  • There are no ads, no third-party trackers, and no cross-site profiling.

Desktop app

Orbit ships no telemetry. There is no analytics crate or client, no installation or session identifier, no usage event stream, and no third-party tracking SDK. Nothing about how you use the app is sent to the project or to anyone else.

Orbit talks to the network only for things you asked for: checking for and downloading updates, fetching GitHub metadata shown in the Git and GitHub panels, and sending prompts to the model providers your pi agent is configured to use. None of these carry a telemetry identifier.

What Orbit does not intentionally collect

  • source code, file names, file contents, or project and repository paths;
  • terminal commands or terminal output, or shell history;
  • AI prompts or responses, or conversation contents;
  • API keys, access tokens, passwords, MCP credentials, or auth cookies;
  • environment variables or clipboard contents;
  • your IP address as an analytics property, exact location, or private URLs;
  • machine hostname, MAC address, serial numbers, or disk identifiers.

Prompts and tool output you send are handled by the model provider you configured and are governed by that provider's policy, not this one.

Local data

Orbit keeps its settings and state under ~/.orbit-pi/ and reads session data that pi writes. These stay on your machine. Settings → Privacy holds session retention, which archives or deletes old sessions on a schedule you choose; it never uploads them.

This website

orbitpi.app loads a small, self-hosted analytics script only in production builds — never in development. It is used to understand, in aggregate, which pages and releases people read.

The script records:

  • the page path, query string, and referrer;
  • your browser language and screen size;
  • a random visitor identifier stored in localStorage — not a cookie.

It does not use advertising cookies, does not fingerprint your device, and does not track you across other websites. If you set your browser to block scripts or clear local storage, the site works normally without it.

Third-party services

  • Downloads and issue tracking run on GitHub. Visiting GitHub links is governed by GitHub's own privacy policy.
  • Model providers you configure in Orbit are your own accounts. Prompts you send to them are governed by those providers' terms and privacy policies, not this one.

Retention and sharing

Website analytics are self-hosted on infrastructure operated by the project and are not sold, rented, or shared with advertisers or data brokers. Data is retained only as long as it is useful for aggregate product decisions. Because the desktop app collects nothing, there is no app data to retain or share.

Changes to this policy

If this policy changes in a material way, the date at the top of this page will change. Continued use of Orbit after an update means you accept the revised policy.

Contact

Questions about privacy? Email [email protected].