Skip to content

privacy.md

Latest commit

 

History

History
54 lines (39 loc) · 2.08 KB

privacy.md

File metadata and controls

54 lines (39 loc) · 2.08 KB
Raw

Mapick OpenClaw Plugin — Privacy Policy

Version: 0.0.0-spike (placeholder; replace at U9 / Release Checklist) Last reviewed: 2026-04-24

What This Plugin Does With Your Data

Mapick OpenClaw Plugin V1.0 is local-first:

  1. Tool-call redaction (R13) — Scans tool inputs/outputs for credentials and personal data. All scanning happens on your machine; matches are replaced with [REDACTED_n] placeholders before data leaves any tool boundary.
  2. Cost diary (R15) — Records LLM token usage locally in a SQLCipher-encrypted libSQL database at ~/.mapick/plugin/data.db. Never uploaded.
  3. Zombie skill decay (R16) — Tracks Skill usage timestamps locally. Soft suppression is applied via appendSystemContext. Never uploaded.

What Leaves Your Device

  • Identity bootstrap (one-time): mapick_id + device_fp sent to api.mapick.ai/user/identity during first install to allocate your per-device identity. No conversation content.
  • Kill Switch verification (occasional): The plugin occasionally contacts api.mapick.ai to verify that your shared Plugin credentials have not been revoked. No conversation content.

What Never Leaves Your Device (V1.0)

  • Conversation content (prompts, tool arguments, tool results, LLM outputs)
  • Cost accounting rows
  • Skill usage timestamps
  • Redaction match logs

V1.1 Changes (Future)

V1.1 will introduce anonymous hook-shadow telemetry (R14). When V1.1 is published, your consent will be re-requested because the list of activities covered by this document will change.

Revoking Consent

Run openclaw mapick consent disable in your terminal. All local data paths remain untouched; run openclaw mapick purge to also delete local data.

Policy Hash

Every consent record stores the SHA-256 hash of this canonicalized document so that we can prove what version of the policy you agreed to. Canonicalization rules: UTF-8 + LF line endings + stripped BOM + stripped trailing whitespace + single trailing newline.

Run node scripts/canonicalize-privacy.mjs docs/privacy.md to compute the current hash.