Policy / effective 28 August 2026

Privacy, without an asterisk.

Cloud Exit Evidence is designed so your file paths do not need to become anyone else’s data.

Website

The browser demo processes manifest text and selected file metadata only in your browser tab. It does not upload, transmit, persist, or analyze that data. The site has no accounts, cookies, analytics, advertising, pixels, third-party fonts, or third-party runtime scripts.

CLI

The CLI makes no network requests and contains no telemetry. It reads the manifest and local destination you name. SHA-256 content reads happen only where the manifest supplies a comparison hash. Symlinks are not followed.

Saved reports

Reports saved through --output are encrypted locally with XChaCha20-Poly1305 and an Argon2id-derived key. The passphrase comes from CEE_PASSPHRASE and is not stored. Output printed to your terminal is controlled by you.

Hosting logs

The deployment host may retain short-lived security and request logs needed to operate the site. This project does not receive or enrich them. Questions can be raised through the public source repository.