Privacy Policy

The short version

Veilguard runs entirely on your machine. Your source code never leaves your computer. We collect no telemetry and no analytics on what Veilguard scans or finds.

What we do not collect

We never receive, transmit, or store your source code, file contents, scan results, or the findings Veilguard reports. All scanning happens locally.

What leaves your machine

The only outbound network calls Veilguard makes are:

• Dependency CVE lookups— package names (never your code) are sent to Google's OSV.dev to check for known vulnerabilities.
• Pro license validation — if you set a license key, the key and a randomly generated machine identifier (no personal or hardware data) are sent to Polar / veilguard.dev to verify your subscription, at most once every 24 hours.

Payments

Purchases are processed by Polaras our Merchant of Record. When you buy Pro, Polar collects the information needed to process your payment (such as your email and billing details) and is the data controller for that transaction. We never see or store your full payment details. Please review Polar's privacy policy for how they handle that information.

This website

This marketing site is served as static files. We do not use tracking cookies or sell any data. If we add privacy-respecting, aggregate analytics in the future, we will update this policy first.

Your rights & contact

You can request access to or deletion of any personal data associated with your account by emailing support@veilguard.dev. For payment-related data, you can also contact Polar directly through their customer portal.