docs: correct PRIVACY.md to reflect telemetry is on by default (opt-out) (#4631)

* docs: correct PRIVACY.md to reflect telemetry is on by default (opt-out)

PRIVACY.md stated telemetry is opt-in and "off by default" and that the app
"never starts sending anything before you do." The shipped behavior is the
opposite: `apps/web/src/state/config.ts` defaults `telemetry: { metrics:
true, content: true }` so fresh installs emit onboarding/ui_click events from
the first frame, and the first-run banner is a single-acknowledgement
informed-disclosure notice ("I get it"), not an opt-in gate. The daemon gate
(`if (telemetry?.metrics !== true) return`) therefore lets events flow before
any user decision.

Update the doc to describe the actual opt-out model: telemetry is on by
default, the banner is informed disclosure, and Settings -> Privacy (and the
banner footer) provide a one-click opt-out with per-category toggles. No code
change — this aligns the documentation with what ships.

* docs: clarify the consent banner footer only points to Settings

Per review on #4631: the first-run banner footer carries informational text
('Data sharing is on by default. You can turn it off any time in Settings ->
Privacy.') and does not itself expose an opt-out control — the toggle lives
only in Settings -> Privacy. Reword so the doc matches the shipped UI.
This commit is contained in:
Abhishek Sarkar
2026-06-23 14:24:57 +05:30
committed by GitHub
parent fa852014df
commit 7f98b069ca

View File

@@ -5,17 +5,23 @@ when it collects it, and how you stay in control. It documents the behavior
shipped in the app — the same controls live under **Settings → Privacy**.
Open Design is **local-first**. Your projects, generated files, and BYOK API
keys stay on your machine. The app works fully offline; nothing in this page
applies unless you explicitly turn telemetry on.
keys stay on your machine, and the app works fully offline. Usage telemetry,
described below, is the one category of data the app may send — it is **on by
default**, and you can turn it off at any time under **Settings → Privacy**.
## Telemetry is opt-in
## Telemetry is opt-out
Usage telemetry is **off by default**. On first run the app shows a privacy
consent banner asking you to make a choice — it never starts sending anything
before you do. You can change your decision at any time under
**Settings → Privacy**, where each category below has its own toggle.
Usage telemetry is **on by default**. On first run the app shows a privacy
disclosure banner so you can see what is collected before doing anything else.
It is an informed-disclosure notice with a single **I get it** acknowledgement,
not an opt-in gate — and because telemetry is already enabled, the app may begin
sending events (such as onboarding and UI-interaction events) from first launch.
## What is collected when you opt in
You stay in control: the banner footer tells you sharing is on and points you to
**Settings → Privacy**, where you can turn telemetry off and toggle each category
below — and you can change your decision at any time.
## What is collected
When telemetry is enabled, the app may send the following to the Open Design
team. Each category is independently controllable in Settings.