Privacy

Short version: this website sets no cookies and runs no analytics. The desktop app scans everything on your machine, sends nothing, and has no telemetry.

This website

These pages are static files hosted on GitHub Pages. There are no cookies, no tracking scripts, no analytics or telemetry of any kind, and no third-party embeds — the only external requests a browser makes are the two web fonts used for typography. Like every web host, GitHub’s servers record standard request data (IP address, user agent, timestamp) when you fetch a page; that data is processed by GitHub under its own Privacy Statement, not by us, and we never receive it.

The desktop app

Blunt Code runs entirely on your computer. Every analyzer — Ruff, Biome, Semgrep, SonarQube, the secrets scanner and the TODO tracker — executes locally, and the app’s interface is served on a loopback address (127.0.0.1) that only your own machine can reach. Scan results and history live in a local database under %LOCALAPPDATA%\BluntCode. There is no account system, no telemetry, no crash reporting and no “phone home”: after the analyzer tools are downloaded from their official sources on first run, the app works fully offline. Your source code is never uploaded anywhere — there is no upload path in the product.

Where data lives

Everything the app writes — scan reports, history, logs, and the sandboxed analyzer tools — stays in folders under %LOCALAPPDATA%\BluntCode. Uninstalling removes the app; the uninstaller asks before touching your scan data. If you participate in a public discussion on GitHub, what you post there is public and governed by GitHub’s terms.