Legal

Privacy policy

Last updated October 15, 2026

Short version: SwarmCode runs on your computer. We don't run servers that receive your code, prompts or personal data, and we don't track you.

Who we are

SwarmCode is an open-source project maintained by its contributors. You can reach us through GitHub issues. For anything sensitive, use a private security advisory.

This website

• Hosting. The site is served by Cloudflare Pages. Like any web host, Cloudflare processes technical request data (such as IP address, browser type and the page requested) to deliver and protect the site. See Cloudflare's privacy policy.
• No analytics, ads or trackers. We don't use analytics tools, advertising, tracking pixels or fingerprinting, and the site sets no cookies. Fonts and images are served from this site, not from third parties.
• GitHub star count. The home page asks GitHub's public API for the project's star count, so GitHub sees that request from your browser. See GitHub's privacy statement.
• Downloads. The installer is hosted on GitHub Releases, so downloading it is a request to GitHub.

The SwarmCode app and CLI

• Runs locally. The app and the command-line tool run on your machine. There is no SwarmCode cloud service.
• Your code goes only where you send it. To do its work, SwarmCode sends your prompts and the parts of your code an agent reads to the AI model provider you configure (for example Anthropic, OpenAI, Google, OpenRouter or DeepSeek), under that provider's own terms and privacy policy. With local models (for example through Ollama), nothing leaves your computer.
• No telemetry. SwarmCode doesn't collect usage statistics, crash reports or analytics.
• API keys stay on your device: in your environment variables, or encrypted with your operating system's keychain in the desktop app. They are sent only to the provider they belong to.
• Sign in with GitHub or Google (optional, desktop app). Sign-in happens directly between the app and GitHub or Google. The app stores the resulting token encrypted on your device and uses your name and avatar only to show who is signed in. We don't receive this data. You can sign out at any time in Settings.
• Local files. Sessions, proof reports and audit trails are saved in your project's .swarmcode folder and in ~/.swarmcode. Delete those folders to remove them.
• Web access. When an agent fetches a web page or tests your site in a browser, those requests go from your computer to the sites involved.

Your rights

Because we don't collect or store personal data, there is nothing for us to access, correct or delete. For data handled by Cloudflare, GitHub, Google or your AI provider, contact them directly using the links above.

Children

SwarmCode is a developer tool and isn't directed at children under 16.

Changes

If this policy changes, we'll update this page and the date below. Its full history is public in the project repository.