Privacy
Who is responsible
The controller of the personal data described here is Rytis Pleckauskas, Lithuania. Contact for anything in this policy: privacy@ropenode.com.
Your work stays on your machine
Your projects, sessions, transcripts, tool calls and costs are stored in a local database on your machine. We never receive them. Secrets are encrypted at rest with a key held in your operating system's credential store, or behind a master password you set.
The only network calls Ropenode makes are to services you configure (for example your own Jira or IMAP server), to your model provider's own CLI, to our update endpoint to check whether a newer version exists, and — if you sign in — to our licensing endpoint. The update check sends your app version and platform, nothing about your work.
What the licensing check sends
When you sign in or the app re-confirms a licence, it sends: your computer's name (it is what your own device list shows), your operating system and app version, a device identifier, and your licence key or device token. The device identifier is a one-way hash of your machine and user id combined with a fixed salt. We never receive the underlying machine id, your username, your file paths, your code, or anything an agent did.
Website analytics — no cookies, no tracking between days
We measure traffic ourselves rather than handing it to a third party. Each visit is identified by a hash of your IP address, browser and language, combined with a random salt that is replaced every day and deleted within two days — after that, a visit cannot be linked to another day, by us or by anyone else. We do not store raw IP addresses. If you are signed in, your visits are also linked to your account, so we can count which visits lead to a sign-up. We set no analytics cookies and show no cookie banner.
What we hold, why, and on what legal basis
| Data | Why | Legal basis (GDPR Art. 6) |
|---|---|---|
| Email address, password hash | To give you an account and let you sign in | Contract (6(1)(b)) |
| Licence, devices, activation history | To provide and enforce what you bought | Contract (6(1)(b)) |
| Billing records and invoices | To take payment and meet tax law | Contract; legal obligation (6(1)(c)) |
| Support tickets and attachments | To answer you | Contract (6(1)(b)) |
| Visit records (daily-salted hashes; linked to your account when you are signed in) | To count traffic and which visits lead to a sign-up | Legitimate interests (6(1)(f)) |
| Update and download events | To know which versions are in use and reachable | Legitimate interests (6(1)(f)) |
How long we keep it
Account, licence and device records: for as long as you have an account, then up to 12 months. Invoices and tax records: 10 years, because Lithuanian tax law requires it. Support tickets: 3 years after closure. Analytics: individual pageviews and events are deleted after 180 days and visit records after 360 days; only daily totals are kept after that. Each day's salt is deleted within two days and cannot be recovered. Update checks and downloads are counted per version; after 180 days the hashed address and any link to an account are removed from them.
Who else processes it
Stripe (payments — we never see or store your card details), our hosting provider and email provider. They act as processors under contract and may not use your data for their own purposes. Where data is transferred outside the EEA it is covered by the European Commission's Standard Contractual Clauses.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or send it to another provider. Where we rely on legitimate interests you may object at any time. Write to privacy@ropenode.com and we will answer within one month. You may also complain to the Lithuanian State Data Protection Inspectorate (VDAI) or to your own country's supervisory authority.
Automated decisions
We make none. The abuse signals on a licence flag an account for a human to look at — they never revoke anything by themselves.
Children
Ropenode is a professional development tool and is not directed at children under 16.
Changes
If we change this policy materially we will say so on this page and, for account holders, by email.
Trademarks
Not affiliated with, endorsed by, or sponsored by Anthropic or OpenAI. Claude and Claude Code are trademarks of Anthropic, PBC. OpenAI and Codex are trademarks of OpenAI.