Privacy
Local-first by default.
Baray is designed for a local macOS workflow. This page explains what stays on your Mac, what is sent to services you choose to connect, and what the Baray website records.Local app data
Baray stores its main state, Teamspaces, planning, memory, run history, and local backups on your Mac. Baray does not synchronize this application state to a remote database operated by Baray.
Codex and OpenAI
Codex CLI must be installed and connected by the user. When you start a run, send a connected Gateway request, or allow a previously scheduled task to run, the prompt and the context needed for that task may be transmitted to and processed by OpenAI under its own terms and privacy policy.
Optional Telegram Gateway
Telegram is optional. Connecting it requires a bot token and an explicit chat pairing. Messages and files exchanged through this Gateway pass through Telegram's servers. Once paired, polling and availability messages may resume automatically when Baray starts; the integration can be disconnected at any time.
Application telemetry and crashes
Baray includes no product-usage telemetry and sends no automatic crash report. Technical version checks may contact the npm registry and baray.app; these requests do not include project files, prompts, Teamspaces, or conversation content.
Website and downloads
Vercel Web Analytics is used only on an allowlist of public pages to understand aggregate audiences and improve the site. Before a page view is sent, Baray removes query parameters and fragments and excludes every admin, unknown, or dynamic path. Vercel may process the event time, sanitized public path and route, referrer, approximate geolocation, operating system, browser, and device type. Separate first-party funnel counters retain only date, locale, CTA placement, funnel stage, architecture and release where relevant. Stages are never joined into a person or session. The final counter measures signed-link triggers, not unique people, completed downloads, or installations.
Cookie-free measurement, retention, and hosting logs
Vercel states that Web Analytics uses no cookies and derives a daily-reset pseudonymous visitor hash from the incoming request, without tracking across different days or websites. Baray does not claim that cookie-free measurement is automatically exempt from consent: the contractual and configuration conditions must be reviewed. A public opt-out is available below and stored locally in the browser. Vercel separately processes technical hosting logs, which may include IP address, user agent, date, time, and requested URL for security and reliability; these logs are not imported into the Baray analytics dashboard.
Privacy requests
For a privacy question or a request to exercise applicable rights, including access, objection, or deletion, email the address below. Because Web Analytics is aggregate and is not linked to a Baray account or persistent identifier, Baray may not be able to identify a specific analytics record as yours. donnai.contact@gmail.com
