Summary
- The website has no accounts, no sign-in, no advertising, and does not sell personal information.
- Optional analytics runs only if you accept it. It records page views and clicks on install links, with no stored identifier, no session recording, and no form contents.
- The Andromity software runs on your machine. Its optional anonymous usage telemetry never includes your code, prompts, file paths, or API keys, and you can turn it off.
Who this covers
This policy applies to andromity.agenticmarket.dev (the “website”). AgenticMarket (“we”, “us”) operates the website and publishes the open-source Andromity coding agent. The software’s own data flows are summarized in the Andromity software section so you can see the whole picture in one place.
Data we handle on the website
Always (needed to run the site)
- Server request data. Like any website, our hosting infrastructure processes your IP address, the page you requested, your browser’s user-agent string, and the time of the request in order to deliver pages and protect the site from abuse.
- Essential storage. A cookie that records your privacy choice and a local-storage entry for your theme. See the Cookie Policy.
Only if you accept analytics
- Events: page views; clicks on VS Code Marketplace install links and where they were on the page; copies of the install commands; and the opening of a GitHub draft from the “Built with Andromity” form with whether the project is open or closed source.
- Context on each event: the page address without query string or fragment, the referring site without query string, browser and operating-system name and version, device type, screen size, and a random anonymous visitor and session identifier that exists only in the page’s memory.
- Never sent: anything you type into a form, names, email addresses, repository or demo links, or descriptions. Automatic click capture, session recording, error capture, surveys, and user profiles are switched off.
Your IP address reaches PostHog’s servers as part of the network request, as it does with any web request, but we do not include it in the events we send.
When you contact us or submit a project
The “Built with Andromity” form does not send anything to us. It prepares a draft GitHub issue in a new tab; nothing is submitted unless you click Create on GitHub. Issues are public and handled under GitHub’s privacy statement. Do not include confidential code, customer data, or credentials.
Why we use it and our legal bases
| Purpose | Data | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Deliver and secure the site | Server request data | Legitimate interests (running a secure service) |
| Remember your theme and your privacy choice | Essential storage | Strictly necessary for a feature you requested, and to honor your choices |
| Understand which pages and install links are useful | Analytics events | Your consent, which you can withdraw at any time |
We do not use your data for advertising, profiling, or automated decisions that affect you.
How long we keep it
- The consent cookie lasts 180 days, after which we ask again.
- The theme entry stays until you clear your browser storage.
- Analytics events are kept only as long as we need them to understand website usage and installation interest. Because they are not linked to a stored identifier, we cannot look up the events of a particular person.
- Server request data is kept by our hosting infrastructure for a limited period for security and troubleshooting.
International transfers
Analytics events are processed in the United States. Where the law requires safeguards for transfers from the EEA, the UK, or Switzerland, we rely on the transfer mechanisms our processors offer, such as standard contractual clauses. If you reject analytics, no analytics data leaves your browser.
Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, to withdraw consent, and to complain to your data protection authority. California residents have rights to know, delete, correct, and opt out of the sale or sharing of personal information; we do neither.
- Withdraw analytics consent: or use the link in the footer.
- Browser signals: we treat Global Privacy Control and Do Not Track as a rejection of analytics.
- Other requests: contact us as described below. We will respond within the period required by applicable law.
We cannot match anonymous analytics events to you, so access and deletion requests will mainly concern anything you have sent us directly.
The Andromity software
Andromity is open-source software that runs in your editor or terminal. This website does not receive your code. In summary:
- Model providers. When you use a cloud model, the task context needed for the request is sent to the provider you configured, under your agreement with that provider. With a local Ollama model, inference stays on your machine, although individual tools or integrations you enable may still use the network.
- Edge gateway. If you use Andromity’s hosted gateway, it forwards requests without persisting prompts, source code, or completions.
- Optional anonymous telemetry. The software can send anonymous usage pings, such as operating system, Python and Andromity versions, the provider and profile in use, an anonymous installation identifier, and whether sessions end in error. It does not send file paths, code, prompts, API keys, or environment variables. The telemetry disclosure is the authoritative list.
- Opting out of telemetry. Set
DO_NOT_TRACK=1, turn it off in the terminal interface settings, or settelemetry = falsein~/.andromity/config.toml.
Details on permissions and isolation are in the security documentation.
Children
The website and software are developer tools and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
Security
We serve the website over HTTPS, set the consent cookie with the SameSite attribute (and Secure on HTTPS), restrict analytics to an allowlist of events and properties, and keep secrets out of the browser. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
Changes to this policy
When we change what we collect or how we use it, we will update this page and the date at the top. If a change affects analytics, we will ask for your choice again.
Contact
AgenticMarket is responsible for the website. For privacy questions or to exercise your rights, reach us through the Andromity community on Discord, or open an issue on GitHub that asks for a private channel. Issues are public, so please do not include personal or confidential information in them.