FAQ: local Ollama, privacy dial, and when data can leave the machine

[mkhellat]

Does any data leave my machine?

By default, no. codebud talks to a local Ollama server, keeps sessions/history under your XDG data dir, and can run command steps in bubblewrap (no network, project-scoped writes). See the Privacy chapter in the Texinfo manual.

Opt-in exceptions (you choose them)

• Remote Ollama (OLLAMA_BASE_URL) — prompts go to that host. Plain http:// to a non-loopback address is refused unless you set CODEBUD_ALLOW_REMOTE_HTTP.
• OpenAI backend — only if you explicitly select it (there is no silent fallback).
• Web search tool — queries are shown and confirmed (except in full-auto / trusted flows as documented).

Privacy dial

--privacy locked|private|trusted (default private) controls how hard isolation and network steps are. Profiles like unattended bundle mode + privacy for deliberate hands-off runs.

Encryption

Optional age encryption at rest for sessions, history, and project indexes (codebud key init, crypto extra).

If something here disagrees with codebud doctor or the manual on your build, comment with versions — docs bugs are welcome issues.

[mkhellat]

Accepted summary for agents: by default nothing leaves the machine (local Ollama). Opt-in egress is remote Ollama / explicit OpenAI / confirmed web search — see the post body and llms.txt. Run codebud doctor before claiming an air gap.