Legal
Privacy policy
Last updated: 6 September 2026
The short version
- The Travsr CLI, daemon and MCP server send us nothing. No telemetry, no account, no code, no graph. Everything they build stays on your machine.
- This website counts page views with a Plausible instance we host ourselves. No cookies, no cross-site tracking, no profile of you.
- If you use a form or email us, we keep what you sent so we can reply.
- We do not sell personal data, and we do not run advertising.
The software
Travsr does not phone home. Indexing, storage and retrieval all
run locally. The graph is a SQLite database inside your repository, under
.travsr/, and the MCP server reads it over a local connection. Your
source code, the graph built from it, and the queries your agent runs against it
never reach us.
The CLI does make network requests, and only these: downloading its own binary and updates, downloading language analyzers and embedding model files, and resolving the release you asked for. Those requests go to GitHub Releases, Hugging Face, or npm, depending on how you installed Travsr, and they are subject to those providers' own privacy policies. Standard request metadata (your IP address, the file requested) reaches those providers; it does not reach us, and none of it describes your code.
If you connect Travsr to an AI agent, that agent is a separate product with its own privacy terms. Travsr hands it graph results locally; what the agent then sends to its own provider is governed by that provider, not by us.
This website
Analytics
We use Plausible Community Edition, which we run on our own
server at plausible.travsr.com. It is cookie-free and collects no
personal data: it records the page URL, referrer, and coarse device and country
information derived from the request, aggregates it, and discards the rest. It
does not follow you across sites and cannot identify you. Because the instance is
self-hosted, that data stays on infrastructure we control and is never shared with
an analytics vendor.
Hosting
The website and docs are served by Cloudflare Pages. Cloudflare processes requests on our behalf as a hosting provider and keeps short-lived logs, including IP addresses, for delivery, caching and abuse prevention. Cloudflare Pages also injects its own Web Analytics beacon, which reports aggregate performance data. See Cloudflare's privacy documentation for what they retain and for how long.
Cookies
We set no tracking cookies. The only thing the site stores in your browser is your
light or dark theme preference, kept in localStorage on your own
device. Nothing reads it but the page you are on.
Forms and email
If you send the contact form, we store your name, email address, chosen topic, and message. If you join a waitlist, we store your email address, the handle you gave, and the use case you selected. In both cases we also store the time of submission and your IP address, which is used to rate-limit submissions and block abuse.
Submissions are held in Cloudflare Workers KV and are readable only by us. We use them to reply to you and, for waitlists, to contact you when a place opens. We do not add you to a marketing list off the back of a support message, and the only people who see what you sent are us and the providers listed below. Email you send to [email protected] is held in our mailbox for as long as the conversation is useful.
Every submission is stored with a 24-month expiry, so it is deleted automatically at that point whether or not anyone remembers to prune it, and we delete them by hand sooner once they are no longer needed. An email thread that grew out of your message lives in our mailbox for as long as the conversation is useful, and you can ask us to delete that too.
Who else processes your data
- Cloudflare: hosting, request logs, and Workers KV storage for form submissions.
- Oracle Cloud Infrastructure: the server that runs our self-hosted Plausible instance.
- Google Workspace: sends us the notification email when you use the contact form, which carries your name, address, topic and message, and stores mail sent to and from [email protected].
That is the whole list. There are no advertising networks, no data brokers, and no third-party analytics or session-recording scripts on this site.
Your choices
You can ask us what we hold about you, ask for a copy of it, ask us to correct it, or ask us to delete it. Email [email protected] and we will act on it, normally within 30 days. Because we hold so little, most requests come down to deleting one form submission and any email thread attached to it. You do not need an account with us, and we do not create one for you.
Children
Travsr is a developer tool and is not directed at children. We do not knowingly collect personal data from anyone under 16.
Changes
If this policy changes, the updated version is posted here with a new date at the top. Material changes to how we handle form submissions will also be noted in the release notes.
Contact
Questions about privacy, or a request about your own data: [email protected].