Privacy

OpenTac has no telemetry, no analytics and no accounts. This page lists what it does contact, so you can check.

The app

• GitHub. OpenTac fetches the God's Eye View code from its mirror (https://github.com/gonzoinceng-ctrl/opentac-engine) and checks it for updates while running (at launch, every few hours, on wake and on window focus). It checks for new app versions through GitHub Releases. GitHub sees your IP address, as any website would.
• The npm registry. Installing and updating the engine's dependencies downloads packages from npm.
• nodejs.org is contacted only when the app is built, never when you run it.
• God's Eye View's own data providers. The globe fetches live data (flights, ships, satellites, imagery, maps, cameras) from the providers its authors chose, directly from your Mac. Which providers, and their terms, are listed in upstream's DATA_SOURCES.md. Those requests carry whatever the provider needs, such as the area you are viewing, and keys you supplied.
• Your chosen AI provider, if you turn on summaries or voice. See AI options.

OpenTac itself sends nothing about you, your usage or your machine to its authors.

Where your data is stored

• API keys you enter in the globe are saved in the engine's .env file on your Mac and sent only to their own provider.
• Keys for OpenRouter and xAI summaries are stored encrypted on your Mac, protected by a key held in the macOS Keychain. They are not written to the engine's .env.
• OpenTac's settings and logs stay in its folder under ~/Library/Application Support. Logs have key-shaped text redacted.

Local-only endpoints

The engine listens on 127.0.0.1 only, on one fixed port. It includes a local /mcp endpoint, so any program running on your Mac under your account can read the globe through it while OpenTac is running. Nothing is reachable from other machines. If you do not want that, quit OpenTac when you are not using it.

This website

No analytics, no cookies, no fonts or scripts from other sites, and a policy that blocks the page from making any requests except to itself. Download links point to GitHub and are resolved when the site is built, so your browser makes no call to GitHub until you click one. The site is hosted on Cloudflare Pages, which keeps ordinary server logs of requests.

The contact form

If you use the contact form, the name, email address, subject and message you type are stored in a Cloudflare KV database belonging to this project, are read by hand, and are deleted automatically after 90 days. Nothing is emailed or passed to any other service. To limit abuse, a one-way hash of your IP address is kept for about an hour as a counter; your IP address is not stored with your message. Write to the same form to ask for a message to be deleted.