Privacy

Draft: review before launch. Interim copy of orc's PRIVACY.md (orc main at 9e06402e), shown until orc's release carries the signed file. Not legal advice.

Effective 2026-11-11, for orc 0.8.3 and later versions released with this note. It describes the orc program; it is made by Sieversii Software.

What orc collects

Nothing. orc has no telemetry, no analytics, no crash reporting and no account. It sends us nothing, and we receive nothing about you from it. Your plans, code, settings and logs stay on your machine, in plain files.

When orc uses the network

orc works offline. Day to day it needs no network, and it never talks to a server of ours. It reaches the network only through services and programs you choose, on your own accounts:

• git, to your own remotes: a fetch when you ask for one (orc sync, orc wt up --fetch, a key in the TUI) or on a timer if you set fetch_every; a push when you push or finish with a push you turned on; a fetch or push when you work with a pull request or a peer review. One push runs without a key press: when you rename a worktree whose branch you pushed and that has no pull request, orc retries pushing it under its new name (and deleting the old remote name) until it succeeds.
• GitHub, through the gh program you installed and signed in to: pull requests, when your project chose integrate = "pr", and while the TUI polls a plan's open pull request (pr_poll, on by default, only in such a project). orc doctor runs gh auth status whenever gh is installed.
• Linear, only if you set up the Linear link: tickets you create, read or move, and signing in. Signing in opens a listener on your own machine (127.0.0.1) for the browser to return to.
• Your check hosts, over ssh, only if you list them: checks that run there, orc doctor, and cleaning them after a prune.
• Worktree set-up, only if you turn it on: a scaffold.toml that names a template such as node-pnpm-mise makes each new worktree run its installs (mise install, pnpm install, cargo build), which may download packages. With no scaffold.toml, a new worktree runs none.
• Programs you name: your coding agent (such as Claude Code or Codex), your checks and hooks, and any describe or relate command you configure. They use the network as they do on their own.
• orc update, below.

Each of those services and programs (GitHub, Linear, your git host, your coding agent and anything else you connect) has its own terms and privacy policy, which apply to what you send it. orc sends it only what the action needs: for example, a pull request's title and description, or a ticket's.

What orc update sends

orc update and orc update --check ask GitHub for orc's releases through your gh, signed in as you, so GitHub's privacy policy applies to that request and GitHub sees it as yours. orc adds nothing about you or your machine to it. orc asks only when you run one of those commands, or, if you turn on [update] check_every in orc's global config (off by default), from the TUI at most as often as you set.

Planned, not yet built: a download host of ours, so updates need no gh. When it ships, this note will say what it receives and keeps, before any version uses it.

Your choices

Every network use above is something you ask for or turn on, apart from those named: the pull request poll in a project that uses pull requests, orc doctor's checks and the pending-rename push. Leave a feature unconfigured and orc does not use it.

Contact

Questions about privacy: [email protected]

The sites

Effective 2026-11-11. This note describes orc.sieversii.ca and dl.sieversii.ca; they are run by Sieversii Software, British Columbia, Canada.

What orc.sieversii.ca and dl.sieversii.ca collects

Counts, and nothing that identifies you. No cookies, no local storage, no tracking scripts and no third-party services: your browser runs nothing for us and stores nothing from us.

For each page and each fetch of the install script, our server notes one count with only these fields:

• the site and the page's path (without any query string);
• the country Cloudflare reports for the request;
• the host name of the page that linked here, if any (not the full address);
• a coarse kind of client: browser, command line (such as curl), bot or other;
• the response status.

Downloads from dl.sieversii.ca are counted the same way: the app, version, file and platform, the country, the response status, and whether the request came from the install script, from orc's own update check (which reports only its version and platform), or something else.

We do not keep your IP address, your full browser identification string or any identifier, so a count cannot be tied to a person or joined across visits. Counts are kept for about three months.

Who hosts the sites

Cloudflare hosts the sites and keeps the counts (in Workers Analytics Engine). It handles every request to serve it, keeps its own aggregate traffic statistics, and its own privacy policy applies to that.

Your choices

There is nothing to turn off: the counts need nothing from your browser, and the sites work the same with JavaScript off.

Contact

Questions about privacy: [email protected]