Public website
The website does not create user accounts, set application cookies, run analytics, load remote fonts, or accept evaluation datasets. The bundled demo presents fixed public fixture data already included in the repository.
Local application
Full comparisons run on the user's computer. Source files, normalized outputs, run metadata, reports, and replay artifacts are retained under the local project according to its storage configuration. They are not uploaded to StructTrace.
Explicit provider traffic
If a user configures the Experimental OpenAI-compatible adapter, StructTrace sends the configured request to that endpoint. The provider's privacy terms then apply. Credentials are read from the named environment variable and are not stored in StructTrace artifacts.
Sharing evidence
Case-level artifacts may contain private inputs and outputs. Review them before sharing. Prefer the aggregate-only share export when case content is not required. Redaction is defensive, not a promise that every sensitive value can be inferred and removed automatically.
Questions
Open a repository discussion for general questions. Report sensitive security issues through a private GitHub security advisory.