Zero-trace by construction

Why your source never leaves the device.

Zero-trace isn't a privacy setting you can toggle off. It's the architecture.

The heavy work happens in the on-device Rust runtime. Edge workers are stateless: they handle auth, entitlement, ingest, metering and signing - never source. Telemetry and dashboards are metadata only. Memory syncs as ciphertext (end-to-end encrypted).

Before any string enters a payload or a non-admin surface we ask a single question: would a visitor or a non-admin ever see this? If yes, it's stripped. If a feature needs your code off-box to work, we don't build the feature.