Skip to content

privacy.md

Latest commit

 

History

History
50 lines (35 loc) · 1.93 KB

privacy.md

File metadata and controls

50 lines (35 loc) · 1.93 KB
Raw

Privacy

What we send at enroll time

telemetron setup may call POST /v1/enroll when no token source is already configured. The enroll request sends exactly:

  • schema
  • install_id
  • machine_id
  • os
  • arch
  • source
  • telemetron_version
  • pack (the configured mode, e.g. openclaw)
  • tier (deployment tier, e.g. internal, external, or test)

What we send at flush time

Normal OTLP metric flushes send:

  • the existing OTLP metric payload produced by telemetron
  • install_id as an OTLP resource attribute
  • deployment_id as an OTLP resource attribute (operator-configured identity of the deployment)
  • tier as an OTLP resource attribute (internal, external, or test)
  • environment as an OTLP resource attribute (operator-configured environment name)
  • pack_version as an OTLP resource attribute (version of the pack being observed)
  • telemetron_version as an OTLP resource attribute (version of the telemetron binary)

deployment_id, tier, environment, pack_version, and telemetron_version come from the operator's config or binary metadata, not from the host. They never contain hostnames, usernames, or paths.

What we never send

telemetron does not send:

  • hostname
  • username
  • home-directory paths
  • MAC addresses
  • kernel version
  • session content, prompts, responses, or tool payloads

File permissions & rationale

/etc/telemetron/token is written 0400 because it is a bearer secret.

/etc/telemetron/install-id is written 0644 intentionally. The install id is an anonymous UUID, not a bearer credential. Keeping it world-readable lets support scripts, diagnostics, and operators inspect or report the installation identity without requiring sudo.

Opt-out

Set TELEMETRON_NO_AUTO_ENROLL=1 before running telemetron setup to skip anonymous enrollment entirely. In that mode, setup exits cleanly without starting the service unless some other token source is already present.