Privacy
Iro is local-first. Your data stays on your machine.
- No product analytics, no session replay. There is nothing to opt out of because nothing is collected. This website ships near-zero JavaScript and no trackers.
- Opt-in error tracking only. PostHog error tracking, off by default, asked once (the Store's first run or Settings). It covers Iro's own crashes and uncaught errors from the kernel, main and Iro UI, with paths and user data scrubbed. Nothing from app views or services is ever reported.
- Credentials stay in the OS-encrypted vault on your machine. They are sent only to the service's own API origins, never to Iro Labs or anyone else.
- No account, no cloud backend by default. Storage, secrets and sync are contracts, so remote backends can plug in later — but nothing leaves your machine unless you set that up.
This page and the homepage exist in this form because OAuth verification (Google) and listing require them. A custom domain comes before that step; until then this site runs on a *.pages.dev domain.