Privacy

The CLI

The open-source atcr binary is local-first. It has no account system, no telemetry, and no analytics. It does not phone home. The only network traffic it generates is the model API calls you explicitly configure, sent directly from your machine to the providers whose keys you supply.

What stays on your machine

• Your code and diffs — never uploaded anywhere except to the model endpoints you configure.
• Review payloads, per-agent findings, and reconciled reports, written to .atcr/ in your repository.
• Provider keys, read from your environment and config — never transmitted to atcr.dev.

Model providers

When you run a review, your diff is sent to the model providers you configured. Their handling of that data is governed by their own privacy policies, not this one. To keep everything local, configure local models (Ollama, vLLM) and no code leaves your machine.

This website

atcr.dev is a static site. The pages themselves set no tracking cookies and embed no third-party analytics. Standard server access logs may be retained transiently by the host for security and operations. The one place this site collects information you submit is the Team Edition pilot signup form on team-edition.html — described in the next section.

Pilot signup (Team Edition)

The Team Edition pilot application form on team-edition.html collects four fields:

• Work email (required) — to reply to your pilot application.
• Team size (required) — to gauge the shape of the pilot cohort.
• Tech stack (required) — to understand the languages and tools you review against.
• Pain points (optional) — a free-text note on what is slow or unreliable in your current code review flow.

Submission is handled by Netlify Forms: the form data is transmitted to Netlify's form-handling backend, where it is stored so the pilot can be reviewed and you can be followed up with. Pilot signup data is retained for the duration of the pilot program and deleted within 30 days of the pilot concluding or upon your request. A hidden honeypot field is used to filter bot submissions; the form itself adds no other tracking. The information you submit is not sold or shared with third parties for marketing. To request access to or deletion of the data you submitted, email privacy@atcr.dev. For questions not involving personal data, you may also open an issue at github.com/samestrin/atcr.

Team Edition

Team Edition is a separate, opt-in hosted service. It stores only the rosters and reconciled reports you choose to share, under a separate agreement presented at signup. It never sits between the open-source panel and your diff. The pilot signup data described above is collected on the public site to evaluate pilot applications; it is distinct from the Team Edition service data governed by that separate agreement.

Contact

Privacy questions: privacy@atcr.dev. Other questions: github.com/samestrin/atcr.