what we send
The disclosure, in full.
Developers are telemetry-sensitive, and rightly so. Here is the complete list of what the client transmits — and the firm boundary it never crosses. The client is open source, so you can verify every line of this.
what leaves your machine
- device id
- A per-install random identifier bound to your publisher account.
- OS + surface
- Operating system and which surface is showing the banner (shell, later tmux/vim).
- display-dwell timing
- How many seconds the banner was continuously displayed — the viewability signal.
- terminal width
- Column count, so the line can be truncated to fit. Nothing about what's in those columns.
what never does
- ✕Command contents or arguments
- ✕Keystrokes or terminal output
- ✕Working directory, file names, or environment variables
- ✕Command history
The background connectivity probe is a single TCP connect to the ad host — it carries no payload beyond establishing whether you're online, and its result is cached so the prompt path never blocks on the network.
Installation is explicit opt-in and prints this disclosure before it registers. The off toggle is instant and persists across shells. Uninstalling removes the shim and the device key.