// privacy.md
Privacy
Dragonfly is local-first by design. There is no account to create and no server to send anything to. Here is exactly what that means.
What Dragonfly collects
Nothing. Dragonfly has no account, no sign in and no backend server. It does not send your requests, responses, collections, environments or usage anywhere, and it ships no analytics or telemetry.
Where your data lives
Collections, environments and request history are saved in VS Code's own workspace and global storage on your machine. Auth secrets, such as bearer tokens, API keys and basic-auth passwords, go into VS Code secure storage (SecretStorage), never written into a collection file on disk.
The requests you send
When you press Send, the request goes directly from your machine to the endpoint you chose. Dragonfly does not proxy, log or inspect that traffic. Where it goes, and what it contains, is entirely up to you.
Third parties
The extension itself talks to no third-party services. This website uses privacy-friendly, cookieless analytics to count page views. Installing from the Visual Studio Marketplace is governed by Microsoft's own terms and privacy policy.
Questions
This is the whole policy: your data stays with you. If anything is unclear, or you spot something that should be tightened, get in touch.
Reach me at saurowankhade@gmail.com.