What phones home, exactly

Since the whole pitch is "your models stay yours," here's the actual network list. Pulled from the code, not from marketing. Put Little Snitch or a firewall on it and you'll see the same thing. With nothing configured and nothing clicked, the desktop app makes two kinds of calls:

1. License heartbeat. At launch, and hourly while a Pro license is active. It sends one field: a hardware ID. No app version, no OS, no machine name, no email. It gets a signed token back. Offline, it keeps the token it already has and decides your tier from the token's own expiry. Only an explicit revoke from the server clears it. 2. Crash reports. Sentry, packaged builds only. Stack trace, version, platform, license tier. Send-PII is off, performance tracing is off, and a scrubber strips tokens, hardware IDs, and API keys before anything leaves. There is no toggle for this yet. If that's a dealbreaker, say so here and I'll add one.

That's the baseline. Everything else only happens when you do something:

- Check for Updates (About window) fetches the release feed. It never checks in the background. Nothing downloads without a second click.

- Co-Op connects to the relay only when you host or join. Team tier, desktop only. The document transits the relay so late joiners can sync; the room code is the only secret. You can point it at your own relay.

- AI is off until you enter a key. Calls go from your machine straight to the provider you picked. Nothing passes through me. It sends table and column names, types, and your prompt. Never row data, except text you highlight for proofreading. Keys sit in the OS keychain.

- Your databases are direct connections from your machine. There is no proxy in the codebase. - Feedback sends what you typed, an optional email, an optional screenshot, and your hardware ID (a random browser ID on web). The form says so on screen.

- The MCP server is inbound only: loopback, token on every request, refuses browser origins, zero outbound calls.

Not on the list: analytics of any kind. No beacons, no Google Fonts, no CDN scripts. Fonts are bundled. The CSP is in the repo and CI fails if it drifts.

The web studio at app.wurk.haus is stricter: no Sentry at all. Signed-in users get an entitlement check every six hours carrying only the auth token. Anonymous users make zero calls.

One caveat so nobody's proxy log surprises them: the exported HTML report pulls Google Fonts, Tailwind, and Mermaid from CDNs when the recipient opens it. That's the export, not the app.

If you find a call I didn't list, post it. I'd rather eat that here than have it found later.