Matlock Privacy Policy

1. Your Code Stays Private (Desktop, Browser WASM & Web Command Center)

Matlock — Agent & Developer Tools runs 100% locally on your own CPU — and 100% inside browser memory on the Browser WebAssembly Instant Audit and the read-only Web Command Center (/en/app) with 0 bytes sent to Matlock. Zero lines of source code, file paths, folder names, git branches, or scan scores are ever uploaded to our servers or used to train AI models.

2. Cookies, First-Party Browser Storage & Global Privacy Control (GPC)

Neither the Matlock desktop app nor matlock.dutchp2p.com uses Google Analytics, PostHog, Segment, Sentry, ad pixels, or cross-site tracking cookies, and Global Privacy Control (GPC) signals are honored by default. Functional cookies are strictly limited to matlock_lang (SameSite=Lax, 12-month expiry, set only when you manually switch language) and an optional matlock_preview cookie (SameSite=Lax, 24-hour staging preview flag when ?preview=1 is used). First-party browser sessionStorage (for unpaid 24-character token session continuity) and localStorage on /en/app (storing only local settings and local scan history) stay strictly in your browser with zero server upload (GDPR Art. 6(1)(f) / ePrivacy Art. 5(3)). The website has no sign-in, stores no Pro session or browser device identifier, and never calls our edge license activation service.

3. User-Started Network Calls, GDPR Art. 6 Legal Bases & Retention Schedule

Matlock transmits data only when you or your configured headless agent start an action (and setting MATLOCK_OFFLINE=1 blocks all outbound requests completely):

• Desktop License Activation, Renewal, Seat Move & Headless Gas Keys (Contract / Legitimate Interest, GDPR Art. 6(1)(b)/(f)): The desktop app and matlock-mcp CLI are the only callers of our edge activation service (the browser never calls it), sending only your contiguous 24-character Activation Key (e.g., i34324h32HNbN4u9Kp7xYz8Q), OS workstation identifier (windows, linux, linux_googlebook, or macos), and a one-way cryptographic OS machine ID hash (workstation seat bindings retired at license term + 12 months; moved-device audit markers swept at 24 months / 730 days). Headless agent endpoints store zero raw IPs: rate-limit network hashes expire automatically and unbound MATLOCK_GAS_KEY allowances store zero device identifiers.
• Update Check (Legitimate Interest, GDPR Art. 6(1)(f)): Runs only when you click "Check for updates" (or enable checks on Linux/GoogleBook; Windows builds update directly through the Microsoft Store). We do not log or store update-check IPs.
• Anonymous Feedback (Consent, GDPR Art. 6(1)(a)): Sent only when you type a message and press Send. There is no email field, and feedback messages are retained for up to 180 days.
• Optional Scrubbed Crash Reports, Ignore Tallies & Agent Diagnostics (Consent / Art. 6(1)(a) on Desktop; Art. 6(1)(f) in unsealed --headless sessions, disable via MATLOCK_DIAGNOSTICS=0 or matlock-mcp telemetry disable): Turned OFF by default in desktop Settings. Only when active, Matlock strips local file paths, usernames, emails, IPs, and secrets on your computer before sending. Scrubbed crash/error groups, built-in check ignore tallies, opt-in false-positive calibration snippets, and 6-category non-code agent reports live in an isolated diagnostics store for up to 180 days (6 months); scrubbing edits text in place ([scrubbed]) while keeping the record and count, and manual operator noise cleanup writes a zero-content audit line. By turning on diagnostics on Desktop, we do not see or save your personal data, and you consent that your agent can send non-code diagnostic reports while working with MCP.

4. Local User-Profile Storage, Passphrase Sync & Private Alert Station

All desktop and headless settings, 5-scope ignores, custom rules, and sealed baselines live only on your own computer in private local user-profile storage outside your repository, never inside your git repo. Matlock only reads your project by default; if you turn on Restore (desktop app only), it can put back a recorded test after you approve each change (archived local test snapshots expire 90 days after acceptance). Sync across my computers (desktop Pro, off by default) writes passphrase-sealed integrity files (counts, tamper-evident hashes, and removed-test records only — never source or test code) into a folder you choose and opens no network connection. Temporary run logs in your OS temporary cache are deleted directly via OS file unlink. Alert Station emails and scripts execute locally from your computer to your chosen destination — Dutch P2P never relays, intercepts, or sees your alerts.

5. Sub-Processors, Multi-Chain Settlement, SCCs, Breach Notice, Age 16+ & Your Privacy Rights

Matlock is solely for users aged 16 and older (COPPA / GDPR Art. 8). Named sub-processors are Cloudflare (edge hosting, encrypted Zero-PII license storage, isolated diagnostics store, DDoS protection, and Cloudflare Email Sending from matlock@dutchp2p.com), Alchemy Insights (read-only blockchain RPC verification across Solana USDC, Solana PayPal PYUSD, Base USDC, and Polygon USDC when verifying a transfer — zero wallet addresses or PII stored by us), Microsoft Store (Windows distribution/updates), and Google Workspace (direct support email sent to dutch@dutchp2p.com, retained up to 2 years after resolution). Card checkout is powered by optional MoonPay and Transak on-ramps settling 24.99 USDC directly to Dutch P2P (zero card data stored by us; zero-fee PayPal PYUSD and Web3 USD stablecoins are also available). Checkout passes only your non-personal 24-character order key, 2-character language code, and EU waiver flag; upon verified payment confirmation, any optional receipt email address you enter is used once in memory via Cloudflare Email Sending solely to send one license email from matlock@dutchp2p.com (0-second persistent email storage and zero marketing emails ever), storing only a one-way cryptographic hash of the key in encrypted Zero-PII storage for license term + 7 years. International transfers rely on EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum. In any personal-data breach, we notify competent supervisory authorities within 72 hours where required by law and post prominent website/release-notes notice. Exercise access, deletion, correction, portability, or objection rights free of charge (answered within 30 days) by emailing dutch@dutchp2p.com with your Activation Key or License ID.