Privacy
Short, because there is very little to say. Everything below is a statement about code you can read.
There is no account
You do not create one, and there is nothing to log into. The dashboard runs on your own machine and binds to loopback. Nothing you do in the product is associated with a person in any system of ours.
What leaves your machine
launchpad itself makes these requests, and each one follows something you did:
- Licence activation and re-checks — your licence key goes to the payment provider so it can be validated: when you activate or check it, and quietly at most once a day when you run a paid command. A key that has validated once keeps working offline.
- Downloading the paid part — from our licence server, which is told your key, this machine's activation id and the version, and nothing about you or your projects.
- An update check — when you ask, or at most once a day when you run a paid command. It reports what is available; it never installs.
- Your own accounts, when you ask it to act — GitHub (through your own
gh, to set a repository's secrets), Cloudflare and Vercel when you wire a domain, and — only if you turn live signals on — reading your own analytics, build and crash numbers from those services.
Claude Code, which launchpad runs inside, reads your code under Anthropic's terms, as it does for anything else you ask it.
No repository contents, no file names, no scorecard results and no usage data are transmitted. There is no telemetry, no analytics in the product, and no crash reporting of ours.
Where credentials live
In your operating system's keychain — Keychain on macOS, Secret Service on Linux, an encrypted file where neither exists — and from there into your own repository's secrets. Never in a dotfile in your repo, never in a log, never on our side. We could not read them if we wanted to.
What the payment provider holds
The purchase runs through a third-party merchant of record, which holds what it needs for a sale — email, billing country, payment details — under its own privacy policy. We never see full payment details.
This website
Static files. No cookies are set by this page, and no third-party analytics or advertising script is loaded. Its fonts are served from this site, not from a font service.
Contact
Questions about any of this: the public issue tracker.
Last built 2026-09-29.