OPPEN
ManifestoWhitepaperFor agentsAnswersStatusTermsPrivacy
PRE-ALPHA
oppen.xyz · legal

Privacy Policy

Last updated 2026-09-07
—

Summary

oppen is local-first software. It has no backend, no accounts and no telemetry. The application does not send us your keys, your positions, your orders, your agent's reasoning, or anything else. There is no server of ours for it to send them to.

This page exists to say exactly what that means, and to be honest about what visiting this website discloses and what happens if you email us.

01

The application collects nothing

oppen runs entirely on your machine.

  • Private keys are generated locally and stored in your operating system's keychain. They are never transmitted anywhere.
  • Your positions, orders, fills, guardrail settings and decision ledger are stored locally, in a database on your own disk.
  • Your agent's model API key, if you use a hosted model, is stored locally and sent only to the model provider you chose. We never see it.
  • There is no crash reporting, no usage analytics, no update ping and no licence check.

When oppen connects to a trading venue, it connects directly from your machine to that venue. We are not in the path and cannot observe it. What the venue records is governed by the venue's own policy, not ours.

02

What this website sees

This is a static website. It has no login or web forms. We do not use cookies or browser storage to identify visitors. You can request a launch notification by email.

The website and the desktop application have different data practices.

Hosting. The site is served by Cloudflare. As the host and network provider, Cloudflare processes your IP address, user agent and request details in order to deliver the page and to protect the site from attack. This is ordinary server logging that every website has. Cloudflare dashboards can expose request metadata, including IP addresses, which we use to investigate security issues. Cloudflare's own privacy documentation governs what it retains.

Fonts. Space Mono and Archivo are served from this domain, not Google Fonts.

Cloudflare Web Analytics. We use Cloudflare's browser analytics on this website to understand visits, page popularity, referral sources and page-load performance. Your browser loads a script from static.cloudflareinsights.com and sends measurements to Cloudflare. This is website measurement only; the desktop application still has no telemetry. Cloudflare describes this service as cookie-free and without fingerprinting or cross-site visitor identifiers. See Cloudflare Web Analytics.

Launch notification emails. If you email hello@oppen.xyz, we receive your email address and whatever you choose to include. We use it to reply and send the requested launch notification. We do not send your email address or message content to Web Analytics. Ask us by email to remove your notification request.

03

No advertising or cross-site tracking

We do not use advertising networks, tracking pixels, session recording, fingerprinting, or cross-site identifiers. We do not sell or share personal data.

04

Children

oppen is not directed at anyone under 18 and should not be used by them.

05

Your rights

Depending on where you live you may have rights to access, correct, export or delete personal data held about you. Contact us about an email you sent or a notification request you want removed. Desktop application data stays on your machine; we cannot access or erase it.

06

Changes

If this policy changes we will update the date at the top. Material changes will be noted in the project's release notes rather than applied silently.

07

Contact

Security reports: see /.well-known/security.txt.

Privacy questions: privacy@oppen.xyz.

oppen.xyz · 2026 ← back to oppen.xyz