Privacy and telemetry
This page explains what leaves your machine and our websites, and how to turn off what you do not want sent.
What the client sends to the platform
Section titled “What the client sends to the platform”After each decision, the client sends the platform the record of the action and its verdict: what the agent tried to do, such as a command, a file path, a tool or a network destination, and what was decided. That record is what the console shows in the execution graph, the anomalies and the audit trail.
- Credentials are redacted on the machine before anything leaves it.
- The client also keeps a local audit log on the machine.
- The decision itself never depends on the platform: see How OpenLatch works.
Usage telemetry from the client
Section titled “Usage telemetry from the client”The client sends usage telemetry and crash reports to help us improve it. Until the client is signed in, usage telemetry carries only a random identifier of the installation. Once it is signed in, the client links that identifier to your account and organization identifiers, so its usage telemetry is no longer anonymous. Both go to the platform’s own address, so they need no extra destination in your network rules. You can turn either off.
| To | Do this |
|---|---|
| See whether usage telemetry is on, and why | openlatch system telemetry status |
| Turn usage telemetry off | openlatch system telemetry disable, or set OPENLATCH_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 |
| Turn usage telemetry back on | openlatch system telemetry enable |
| Turn crash reports off | Set OPENLATCH_CRASH_REPORTING=0 |
Analytics on openlatch.ai and these docs
Section titled “Analytics on openlatch.ai and these docs”openlatch.ai and docs.openlatch.ai have no sign-in and load no third-party trackers. They record anonymous product analytics through PostHog, hosted in the EU, through a first-party path on openlatch.ai.
We record:
- the pages you visit and how long you stay;
- conversion events, such as copying an install command or following a link to the console;
- Core Web Vitals, so we can keep the sites fast;
- a sample of session replays, with all text and form inputs masked;
- unhandled JavaScript errors, after a scrubber in your browser replaces anything shaped like an email address or an API token.
We never collect what you type in a form, we never identify you from these sites, and we do not sell or share this data.
Opt out
Section titled “Opt out”Add ?ph_opt_out=1 to any page address to turn analytics off on this device. The choice is stored in your browser and survives reloads. You can also block the /ingest/ path with any content blocker.
Moving on to the console
Section titled “Moving on to the console”When you follow a link from these sites to app.openlatch.ai, the anonymous identifier travels in the address fragment, after the #, so the console can join your earlier visits to your account once you sign up. The fragment never reaches our servers.