Privacy
Open Run only asks for information needed to provide the update you chose.
Product update sign-ups
When you leave an email address, openrun.sh stores:
- your email address;
- the update or integration you selected;
- the page where you signed up;
- the referring site without query parameters; and
- when the request was created or updated.
This information is used to understand which features people need and to send the updates requested through the form. It is not sold or used to build an advertising profile.
Cloudflare Turnstile checks public forms for automated submissions. The Turnstile widget is loaded after you engage with a form, and the resulting token is validated by openrun.sh before the address is stored.
Unsubscribing
Every product email must include a personal unsubscribe link. Confirming that link stops product updates for the associated address. A later sign-up can start updates again for the newly selected topic.
Local Open Run data
The open-source application runs on your machine. Repositories, prompts, run transcripts, and diffs remain in its local SQLite database unless you choose an optional hosted integration. See Security for that boundary.
iOS companion
The iOS app is a companion to the copy of Open Run running on your Mac. It
does not create an account with us and it does not talk to openrun.sh.
Pairing points the phone at the address you type or scan.
| Item | Where | Why |
|---|---|---|
| Pairing token | iOS Keychain, this device only, not in iCloud | Prove this phone is paired |
| Server address | iOS Keychain, same | Know where to connect |
| APNs device token | Sent to your Mac, not to us | Approval alerts while the app is closed |
Unpairing from the Device tab, or revoking the device on the Mac, drops the token. Deleting the app also drops the Keychain item for this bundle id.
While paired, the phone can read run transcripts, diffs, and workspace files
from the Mac you paired with, allow or deny supervised tool calls, send a
chat follow-up, cancel a run, and arm or trigger automations. It cannot edit
runtimes, write files, commit, push, or manage projects. That boundary is
enforced on the Mac (mobileScope), not by hiding screens.
Over plain HTTP on a LAN, anyone on the same Wi‑Fi can read that token. Use an https tunnel on a network you do not trust.
| Permission | When |
|---|---|
| Camera | Optional. Scanning the pairing QR. Typing the code works without it. |
| Local Network | First connection to a LAN address. |
| Notifications | Optional. Approvals still work while the app is open. |
The app does not use tracking, advertising identifiers, analytics SDKs, or crash reporters. It does not sell data.
Questions and deletion
For privacy questions or deletion requests, use the private contact route in the Security reporting guide.